Ollydbg 是一个很棒的免费工具，用于分析和调试本机应用程序和 DLL。 此外，HeavenTools 中的各种工具也非常有用。 本机代码并不像逆向 .NET 那么容易，您通常需要在 x86 汇编语言方面有坚实的基础才能走得更远。
Ollydbg is a great free tool for analyzing and debugging native apps and DLLs. Also the various tools from HeavenTools are really useful. Native code is not quite as easy as reversing .NET, you'll generally need a solid foundation in x86 assembly language to get very far.
IDA Pro 是一个交互式反汇编程序。 它可以与 .NET 和本机可执行文件一起使用。 它有一个反编译器插件（HexRays）。 它还有一个调试器。 它非常昂贵，但有免费版本。
IDA Pro is an interactive disassembler. Which work both with .NET and native executables. It has a decompiler plugin (HexRays). Also it has a debugger. It is very expensive but there's a free version.
发布评论
评论（5）
Ollydbg 是一个很棒的免费工具，用于分析和调试本机应用程序和 DLL。 此外，HeavenTools 中的各种工具也非常有用。 本机代码并不像逆向 .NET 那么容易，您通常需要在 x86 汇编语言方面有坚实的基础才能走得更远。
Ollydbg is a great free tool for analyzing and debugging native apps and DLLs. Also the various tools from HeavenTools are really useful. Native code is not quite as easy as reversing .NET, you'll generally need a solid foundation in x86 assembly language to get very far.
如果您指的是一般的逆向工程，您还可以查看用于网络协议嗅探的 Wireshark 等工具
If you are referring too reverse engineering in general you might also check out tools like Wireshark for network protocol sniffing
此外，还有一本关于逆向工程的相当全面的免费维基百科。
Also, there's a fairly comprehensive freely available wikibook on Reverse Engineering.
如果您有 COM dll 的符号，则可以在接口实现上设置断点，并通过 NTSD。
If you have symbols for your COM dlls, you can set breakpoints on the interface implementations and set through the disassembly in NTSD.
IDA Pro 是一个交互式反汇编程序。 它可以与 .NET 和本机可执行文件一起使用。 它有一个反编译器插件（HexRays）。 它还有一个调试器。 它非常昂贵，但有免费版本。
IDA Pro is an interactive disassembler. Which work both with .NET and native executables. It has a decompiler plugin (HexRays). Also it has a debugger. It is very expensive but there's a free version.