Monday, 24 December 2012

Introduction To Reverse Engineering Part 1

It Is The Process Of Discovering The Technological Principles Of A Device, Object, Or System Through Analysis Of Its Structure, Function, And Operation. It Often Involves Taking Something (A Mechanical Device, Electronic Component, Computer Program, Or Biological, Chemical, Or Organic Matter) Apart And Analyzing Its Workings In Detail To Be Used In Maintenance, Or To Try To Make A New Device Or Program That Does The Same Thing Without Using Or Simply Duplicating (Without Understanding) The Original.


2.3.1 OllyDbg 2.01 alpha

OllyDbg is a debugger. This software grants the possibility to debug compiled
programs, with all that comes with it. Setting breakpoints, monitor values, and
everything else that you can expect from a debugger is possible with this.
Editing the program memory to change program functionality is also possible
with this tool, if you only want your 

changes to apply within the scope of one runtime.

2.3.2
HxD 1.7.7.0
HxD is a freeware hex editor. The only end we use this program for is editing
compiled
files. It opens an .exe file, to show its bytecode in hexadecimal form, all
of which is open for editing.
When a certain piece of code that should be changed is isolated within a program,
this software is excellent for the purpose of just entering the
file and replacing that
code, with its good n
avigational controls and search methods.

2.3.3 TSearch 1.6b
TSearch is a freeware tool for scanning and editing memory addresses, performing
code injections and debugging. It also contains functionality for generating trainers,
and some other functions such as a built-in calculator and hexadecimal to decimal converter.

2.3.4 Cheat Engine 6.1
Cheat Engine is an open source tool designed for modifying single-player games
during runtime, to modify the
difficulty by changing some key parameters. It has
matured a lot since its release in 2000 though, and can now be used for a lot of
advanced reversing, not only in games.

2.3.5 BlackMagic and C#
BlackMagic is a library written in C# which uses Windows API calls to gain access
to running processes under Windows. With this library, reading and writing to
memory allocated to
specified processes becomes very straightforward.
BlackMagic also contains other tools, such as injecting assembly code into a
running process, and other functions