Looking for mentor

[Szaka]

As in topic. Im looking for someone who could help me with reversing, i can much but still cant solve really basic problems ;/
I have millions of questions, got skype and teamwiever

 

[Syperus]

Have you checked out Lena's Newbie Reverse Engineering video tuts? She goes over a lot of the common things you see for reversing ie cracking software for keygening ect. If not I would go through these while you look for a mentor. You can download them here: https://tuts4you.com/download.php?list.17. If you haven't done these yet I highly recommend watching them.

You can always ask your questions too and if someone knows the answer they'll get back to you. I know besides myself there is a couple others here that do some reversing.

 

[Szaka]

I not only watch them but i also succesfuly make it myself first and then watch solution, sometimes it shows alternative way. Now the unpathable barrier is anti attach trick i cant detect. No idea how to do it. All i know is patching DbgUiRemoteBreakIn, some process snapshots, isdebugerpresent, generally the old ones. Maybe you have better experience and can share some anti-anti?

The app im trying to attach is Themida. Other example you can try is program "CopyTrans". I can load it in olly easly BUT the point is to attach while its running (and has been started "legally"). Try it and post the result

 

[Styx]

I not only watch them but i also succesfuly make it myself first and then watch solution, sometimes it shows alternative way. Now the unpathable barrier is anti attach trick i cant detect. No idea how to do it. All i know is patching DbgUiRemoteBreakIn, some process snapshots, isdebugerpresent, generally the old ones. Maybe you have better experience and can share some anti-anti?

Instead of looking for ways to bypass/patch anti-debugging techniques, you should look for/research the techniques themselves then attempt to find them in olly.

 

[Szaka]

i don understand what you mean by "research techniques themselves"

 

[till0sch]

i don understand what you mean by "research techniques themselves"

He means you should find out how these techniques against debugging work and them try to find them in olly and bypass or whatever them

 

[Syperus]

What till0sch97 said. If you know how the technique works, ie an anti-cheat method, you get a better understanding of what you should do or the best method to bypass it.

 

[somethingsomethingdarksid]

Themida is an industrial standard executable packer. The kinds of questions you're asking suggest that you're relatively new to the RevEng game. Themida is horrendous to reverse engineer as it sets up its own emulator with intermediary instruction sets, packed into opcodes and encrypted using any technique you're likely to think of. I know, because ive had the same problem at work.

I think you need to start easier - my professional opinion.