I am fairly new to reversing, have been doing it around a year +- few months. I am not doing it everyday but every now and then I find something interesting where to spend my time.
I have found that there are many great tutorials around the internet but eventually they seem to be using the same methods over and over and over again (first two in the list below) and these methods really are useless when it comes to something “real” where programmer has actually put some effort into making your life miserable.
I thought maybe the community could share different approaches in this thread, pointing out maybe some tutorials if you happen to know one or share a tip yourself.
This a thread I started in a forum and I plan to update it when somebody replies to it. Posted it on my blog so I can “archive” it for my own use which may never come.
Methods?
By methods I mean the process which leads you to detection of “badboy” or helps you getting closer to it. I am not talking about methods here how to avoid them (NOPing/Codecaves/Changing registry flags and so on[Though chainging registry flags can help finding a bad- or goodboy.]). Neither I am talking about upacking or deobfuscating.
Read more…