Reverse Engineering 2: Windows GUI Programs
In the first course in this series entitled Reverse Engineering 1: x64dbg Debugger for Beginners, you learnt how to reverse engineer a command line program and learnt how to debug and step over and patch and much more. Now, in this 2nd course, you will continue learning. This time we will be learning how to reverse engineer graphical user interface programs. As usual, we will work with crackme’s that I have written for you to practice reversing.
What you will learn:
-
How to disassemble programs into assembly code
-
Dynamic Analysis
-
Setting breakpoints and stepping through code
-
Modify program behaviour
-
Patching programs
-
Intermodular Call Method
-
Call Stack Method
-
Hardware Breakpoints
-
Memory Patching
-
Patching EAX register values
-
Understanding Trial Period software
-
Understanding Software Registration process
Thank you and see you inside.
Introduction
Introduction
Introduction to windows gui programs
Introduction to windows gui programs
Analyzing PE files
Setting up x64dbg
Setting up x64dbg
Setting breakpoints on strings
Setting breakpoints on strings
Windows API functions
Windows API functions
Pushing parameters to the stack
Pushing parameters to the stack
Bypassing messages
Bypassing messages
Bypassing using xor assembly
Bypassing using xor assembly
Breakpoints on Intermodular Calls
Breakpoints on Intermodular Calls
Breakpoints from Call Stack
Breakpoints from Call Stack
Registration file checks
Registration file checks
Analyzing crackme 2
Analyzing crackme 2
Registration checks
Registration checks
Software registration
Software registration
Removing Nag screens
Removing Nag screens
Analyzing crackme 3
Analyzing crackme 3
Removing Nag screen 1
Removing Nag screen 1
Removing Nag screen 2
Removing Nag screen 2
Setting Registration Status
Setting Registration Status
Trial Periods
Trial Periods
Analyzing Trial Periods
Analyzing Trial Periods
Extending Trial Periods
Autogenerated serial keys
Autogenerated serial keys
Autogenerated serial keys 2
Autogenerated serial keys 2
Practical Exercise - TDC
Practical Exercise - TDC - part 2
Patching EAX register values
Patching EAX register values
Patching EAX register values - part 2
Hardware Breakpoints
Hardware Breakpoints
Hardware Breakpoints - part 2
Memory Patching
Memory Patching
xAnalyzer
xAnalyzer
Configuring xAnalyzer
Serial Phishing
Intro to Serial Phishing
Analyzing the CreateFile API function
Resources for Further Study
Bonus Lecture
