Summary

Reversing a software takes time and patience. It may take days to analyze just one piece of software. But with practice and experience, the time it takes to analyze a file improves.

In this chapter, we dealt with a file that can be reversed using the tools we learned. With the help of a debugger, a disassembler, and tools such as CFF Explorer and TriD, we were able to extract file information and behaviors. In addition, we also learned to use FakeNet to mimic the network and the internet, which became very useful for us when generating network information for the socket functions.

There are a lot of obstacles, including anti-debugging tricks. However, familiarity with these tricks enabled us to skip these codes.

One of the most important tips when reversing is to keep on making snapshots just in case we encounter obstacles. We can experiment on every piece of data that functions require.

Again, reversing is a patience game that you can cheat by saving and loading snapshots.