View Full Version : Reversing procedure

August 7th, 2008, 05:58
Hi masters
I am a completely newbie in reversing
I know that programmers do a lot of tricks to do the protection,like packing,...
Could someone please tell me all the procedure to learn reversing.I mean the flowchart of reversing!
What is the first steps,suppose I know about assembly well.


August 7th, 2008, 07:22
hard work+single stepping ..is a recipie that works..

August 7th, 2008, 07:40
Search the board, and the FAQ, carefully, this question is asked at least once every 2-3 months in the newbie forum.
My personal favorite is LENA's video tutorials. . .

August 8th, 2008, 01:40
thanks friends.
I used lena video tutorials but still confused about the view point and perspective of the way ahead!!


August 8th, 2008, 02:06
keep doing them until you understand.
There is nothing easier.


August 18th, 2008, 02:47
Like yourself I am a newbie so am not in a position to teach or preach.
There does not seem to be a 'universal flow chart' approach that will work.
My advice for what its worth is to become familliar with the 'tools of the trade' there is a whole section on this board.
(I didnt and made an arse of myself- thankfully the guys here are pretty tolerant IF YOU MAKE AN EFFORT)
You obviously have a target in mind, find out all you can about it. Use Google search the Web.
Look on this board for Packer detectors and Unpackers. As a starting point it could be useful to know if the target is packed.
If it is unpack it. Maybe the next step could be to get a dead listing of the unpacked prog (Research WinDasm dead listing)
Then its a lot of hard work looking and trying to understand what is happening with the program and setting break points.
As I have learnt myself the Tutorials only go so far, experiment and you will learn, there is no 'short cut' to gaining experience.
I've been working on my target for about 2 months and still not totally 'cracked' it the guys here will help with specific questions but if they did all the work for you what will you have learnt?
Hope this encourages you to continue.

August 18th, 2008, 22:18
As an OLD school reverser, I can offer this.

There is no flowchart for how to do this. If there was, that's where all the armaments would be stationed. A LOT of the time, finding a novel approach has proved to be the undoing of a specific protection system. They're so concerned about someone blasting the walls, they never thought to look inside the wooden horse.

The more you study, and read tutorials, the more approaches you can learn, and once you start to get on to of the learning curve, you can start developing your own "What Ifs", and that's when the fun really starts.

September 4th, 2008, 20:01
simple, get yourself an old machine running windows, look at the tuts here and get some jolt cola........

October 1st, 2008, 13:21
I promise that I have read the FAQ and tried to use the Search to answer my question

Actually when i read the FAQ; NOW, I scare to ask a question (which is against the rules in FAQ) and immediately banned (which I do not want)
However, I take this risk.
Usually all of us (Newbie) are wondering where to start. As if you are in middle of no where and do not know
how to find a way to reach somewhere. I review the question of this post and I found that there is
a tutorial called "LENA's video tutorials" I search the board with different keyword
but I could not find it.
Is it OK, if I ask where to get it?

October 1st, 2008, 14:18

Did YOU not know that search engines were invented so that YOU can find things on the net that you want/need??? We don't host everything on our server. If you are looking for something called "LENA's video tutorials" why didn't YOU think to put:

LENA's video tutorials (notice I removed the "" marks)

in YOUR favorite search engine, and hit ENTER!!!

I used Google and the very first entry will lead you to where they may be found. Certainly, the proper use of the brain is the "first" and "most important" tool to apply to the subject of attempting to learn reverse code engineering!


October 2nd, 2008, 00:17
O, I see. Say it in the first time. Don't you think I just bought a computer
and start learning reverse code engineering (RCE). I did not just born either that never heard about Google,
and search engine. For your information I even know what kind of algorithm they use
for their search engine.

Last but not least, it would better you mention in your FAQ that if you are looking for
something do not search the board, go and search Google or whatever, search engine.

It is supposed " as title says" this section is for poor newbie that when they born
nobody thought or give at least a clue to to learn RCE from where to start, etc.

In the phrase " to learn RCE you need brain and tools and of course hard work", does not
give even a bit a clue to a newbie to what he or she must do.

more regards

dot_com (try to gain brain form RCE)!!!

October 2nd, 2008, 09:09
[Originally Posted by dot_com;77218] For your information I even know what kind of algorithm they use for their search engine.

I could not get better than a PR4 in a month after site-for-fun launch (using my spare time) from scratch.
So tell us, we (I) are all ears.

There are only 3 kind of people that surely knows it:
1) Google dev staff.
2) Cuil guys (ex google)
3) The guy of an university (and his staff) that, using the worldwide uni-distributed computer time cheated doing a google bombing with parallel search&click from all the world.

The rest has a very behavioral competence about, which isnt worth that so much.


[btw cuil looks VERY good and interesting -too bad i hate black background for principle, why not adding green text at that point :P]

October 2nd, 2008, 11:34
you think I'm bluffing??!!

I neither saw the algorithm in my dream nor created it in my imagination.

I got it somewhere. I did not say I have the source code; NO,

I know by which mathematical method their search engine is based on.

Now you can have more site-for-fun launch.

By the way, if you need more fun, I send you more funny stuff!!!!

October 2nd, 2008, 11:50
Actually dot_com, the FAQ mentions "several" sources on where one might start to learn reversing, including a significant amount of tutorials which are actually hosted on these Forums.

And since you "know what kind of algorithm (google) use(s) for their search engine," how come it never occurred to YOU to actually use it to find what YOU want???

LENA's video tutorials are actually mentioned in this Thread here:


by nadies in post #13. In his post #2 in that same thread he mentions:

"Go to Tuts4you and Krobar tut repositories and find tutorials delving on time trial protections."

Tuts4you is the first listing in google if one does a SEARCH for:

LENA's video tutorials

although there are many sources listed. So we are still left with the conclusion that YOU would rather argue about "anything" other than your own obvious lack of initiative. The point is that "it just didn't occur to YOU" to put LENA's video tutorials in YOUR favorite search engine. You wanted someone else to take you by the hand and "lead' you to what YOU wanted/needed. YOU are responsible for that lack of initiative and your efforts to blame others simply continues to make you look foolish and lazy.


October 2nd, 2008, 13:14
FIRST , When at the first place, you replied me ("Did YOU not know that search engines were invented so that YOU can find things on the net that you want/need???" as if I'm stupid. what should be my response? May be I should have said "Thank You very much for your reply Sir"

SECOND, it was my first day in RCE and I did think the LENA'S VIDEO TUTORIAL is within this forum, that's why it did not occur to me to search myself. Now if you think this is laziness, that's OK. What the hell.

October 2nd, 2008, 14:35
You only continue to prove my point that you: "would rather argue about "anything" other than your own obvious lack of initiative." I will repeat what has been stated here many times.

This is not a kindergarten, where one is taken by the hand and led down the path to skill at reverse code engineering. It is a place where people with sufficient interest; sufficient determination to spend the time it takes to gain any reasonable proficiency at this objective; sufficient "self-motivation" and "determination" to acquire the skills necessary for the task; and a willingness to seek out and find information on the net about their chosen path may come and read and learn and, hopefully, eventually contribute to one of the oldest accumulations of such information on the net.

One of the requirements, clearly stated in the FAQ: "Do not ask for help without showing you made an effort. This includes asking *lameass* questions in the Newbies Forum." Clearly, your post lacks evidence of "effort" at finding the tutorials you sought. And the "Big Read Letters" at the top of the forums direct you to "SEARCH" for what you need "before you post" and it does not limit where you search to these Forums.

Since the "real" issue here is that any simple search of the net for what you were seeking would have produced the information YOU wanted and even a little careful searching and reading on these Forums would have led you to the location of the tutorials you wanted, your efforts at self-justification for not having done so is not very impressive.

That you find it offensive that I encouraged you to use "your brain" as "the 'first' and 'most important' tool to apply to the subject of attempting to learn reverse code engineering" speaks more of your attitude than my own. Had you simply "thought" about what "you" wanted to find and then how "you" might find it, "your" problem would have been easily solved, and you would have heard nothing from me.


October 2nd, 2008, 21:49
OK. We are done. That's it. I do not want to continue this useless discussion. Even though we had argue at the first place (and on the first day of being member of RCE) I would like to let you know that I always try not to offend anybody. free speech is rather different than arguments. By the way,I did not lie about the algorithm.