Need Intro

[a3gamemaster]

I am new to reverse engineering, can anybody post some guideline regarding how to perform reverse engineering taks.

thank you.

 

[cyberinferno]

You probably refer [redacted]

 

[GHOST107]

Depends on what you want to reverse

http://cellframework.sourceforge.net/uploads/Introduction to Server Side Emulation.pdf

 

[a3gamemaster]

Mostly I wanted to learn OllyDBG based reverse engineering in the exe file.

 

[GHOST107]

Then you should start learning assembly language, but assembly language is hard to learn, I recommend before starting learning it you should learn at least one high level programming language(I suggest C/C++)

As a good assembly language book is Art of assembly language, read DOS 16-bit edition:
Art of Assembly Language Programming and HLA by Randall Hyde

Another assembly book is this:
http://www.plantation-productions.com/AssemblyLanguage/pcasm-book.pdf

You should also have a copy of windows API help file a C Style(for refrence if you want to inject or understand what a API function does)
https://sourceforge.net/projects/win32-help-chm/

You can also find windows C style API references on MSDN.

A Linux alternative for API is the Linux System call table
https://filippo.io/linux-syscall-table/

For Linux the syntax is AT&T instead of using Intel syntax(if you know Intel syntax At&T syntax will be easy to understand), the syntax can be set from the debugger

Also you could try simple crack me tutorials, you can look on the net for them, but for unknown binaries(binaries that you don't know the source code, not built by you), I suggest doing them in a sandbox environment like virtual machines or containers.

 

[a3gamemaster]

Thank you for help, appreciated

 

[GHOST107]

Oh yeah, if you end up writing patches(either by an external program or by an injected module), this site gives a good list of OP codes for each instruction and what type of parameters it requires.

This also is helpful if you're doing it old-school, using a disassembler + hex editor.

coder64 edition | X86 Opcode and Instruction Reference 1.12

 

[KrYpT0n]

The easiest way i've found to get started on learning reverse engineering is to write very simple C applications and try to change what they do.

For starters, write a hello world app. Pull up a reference of assembly instructions on the side, and read through what it does. Try changing the string output. Maybe make the app print yet another string.

PS. read up on calling conventions and the stack, it's the most important piece to understand for it all to make sense