第一课题 逆向分析基础知识Ⅰ、导学[本次课题用时：两个星期！]一、前言本课题是小组成立以来的第一个课题！首先，我在这里说明一下我们小组每个课题的学习流程！也方便大家更有效的学习相关专题的知识，以达到事半功倍的效果！小组学习是以课题形式运作的：每个时间段都会有一个课题！每个课题都会有一个导言性质的文章（就是这个文章），用来告诉大家学这个课题需要哪些前提知识、课题需要掌握什么东西、我们已经有的参考资料的下载地址、及相关的建议等！大家看了这儿导言以后，就开始展示自己的能力，搜索你想要知道的知识，学习，在群邮件中讨论自己遇到的问题，把自己的所学写成自己的文章发到看雪论坛上与大家分享自己的成果！、等课题学完了的时候，我们在Q群空间论坛及群邮件上帖一个总结性质的文章，大家跟帖子，写自己在这个课题中所学东西的小结，然后我们会适当的整理，然后以小组的名义发到看雪论坛上！好了，说明就到这里，下面进入正题！二、本次课题需要的前提知识如下：1、汇编语言这个想必有很多的朋友都不会，或者说不了解，但是这个语言无论对于软件破解，调试，逆向分析等等都非常的重要！但是，汇编语言作为大学生计算机专业的必修课程，群里有很多的朋友都有汇编的基础，如果我们把它拿出来作为一个课题来讨论对这些朋友来说是不公平的，所以只要让我们这样的菜菜鸟，自己私下努力、加油！尽快的赶上来啊！当然，大家也不用担心，因为做逆向的每天都会跟汇编语言打交道，只要我们先把汇编最基础的东西学到手，难的地方等以后用到了我们在学！2、C/C++ 语言 其实这个语言是选学的，最好要会，不会也不是不可以！ 但是，朋友们，现在微软以及网上流行的技术资料70%以上样的都是用C/C++编写的！而且，我们逆向的程序很多都是把汇编翻译成C，所以，我觉得C/C++是必须要会的，希望大家努力，我们会提供最容易上手的资料给大家，只要大家努力，一定没有问题的！！3、常见逆向工具的使用（比如OD，PEID，IDA等） 我想这个就不用我说了，工欲善其事必先利其器嘛~ 我们用到的工具最主要就是IDA，而且这个东西上手不是很容易，希望大家做好心里准备！ 在就是OD，C32ASM，PEID之类的了，这些上手相对比较容易，大家加油了啊！三、本次课题需要掌握的知识如下：1、看雪论坛 解密基础知识入门 http://bbs.pediy.com/showthread.php?t=31840 这个帖子中的第一课、第三课、第四课是必须要掌握的！2、看雪论坛 逆向基础知识入门 http://bbs.pediy.com/showthread.php?t=50879这个帖子需要全掌握！这个帖子现在不是很全！但是希望大家能好好看看，文章写的真的非常的经典！我在群共享空间中发了一个书，名叫《夜读天书》，它是我们一直都会用到的教材，希望大家好好研究！四、我们已经拥有的资源列表：1、很精简的汇编语言教程！af3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0t1H3x3W2)9J5k6e0t1H3y4W2)9J5k6e0t1H3z5q4)9J5k6e0f1%4i4K6u0r3k6r3W2S2L8Y4A6A6i4K6u0r3k6h3y4Q4x3V1k6*7P5Y4y4&6M7#2)9J5c8X3q4J5N6r3W2U0L8r3g2Q4x3V1j5J5x3o6l9$3i4K6u0V1z5g2)9J5k6o6q4Q4x3V1k6Z5L8$3#2W2i4K6u0W2K9s2c8E02、我们群共享里有易学C++，讲的很通俗，也很全面！3、群共享里有夜读天书（很经典的逆向教程）--这里谢谢楚狂人老大的分享！4、群里有IDA相关的几篇教程 ---- 来自看雪论坛！5、中山大学C++视频教程： f27K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3x3K6V1&6x3r3j5#2j5h3c8X3k6o6x3^5j5X3j5@1j5e0b7%4k6o6j5K6z5o6g2T1z5e0x3K6k6o6S2W2k6U0x3%4j5K6M7I4x3o6t1&6y4U0k6S2x3X3b7H3y4e0l9H3"" target="_blank">点击这里下载 6、中山大学汇编语言视频教程：5a8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3k6U0m8W2k6o6t1K6y4K6V1^5k6U0f1K6k6X3c8U0x3o6b7K6j5K6u0S2z5o6k6U0k6e0M7^5z5h3p5K6z5e0y4V1k6o6V1H3y4X3j5%4x3$3f1J5j5e0t1H3y4U0l9H3"" target="_blank">点击这里下载 7、黑基汇编语言视频教程：c13K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0m8Q4x3X3g2J5j5i4u0Q4x3V1j5&6y4X3t1I4y4$3x3J5k6X3y4S2z5e0x3&6k6h3g2V1k6e0x3&6x3e0S2U0k6r3f1@1k6X3f1$3x3X3j5I4k6r3u0S2x3K6l9@1y4K6R3@1x3X3f1H3z5h3g2T1x3o6p5`.6c8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3g2)9J5k6i4u0S2M7W2)9J5c8U0V1H3j5U0p5$3j5e0f1&6y4h3t1K6x3e0g2V1z5e0b7K6j5$3u0W2x3o6q4W2y4K6t1@1x3U0V1H3y4X3f1J5y4K6u0X3k6o6p5&6x3U0S2V1x3K6j5$3j5$3f1H3x3l9`.`.3d9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0W2Q4x3X3g2J5j5i4u0Q4x3V1j5J5y4r3x3J5j5U0b7I4y4U0p5&6y4o6R3^5y4o6V1%4z5e0y4S2j5U0q4V1y4$3t1$3j5e0y4W2y4o6k6T1j5h3g2V1z5r3q4S2x3e0j5H3y4X3x3J5j5h3f1&6x3o6l9`.eddK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0S2Q4x3X3g2J5j5i4u0Q4x3V1j5@1y4K6R3@1z5e0j5^5y4o6p5#2k6o6l9#2y4r3q4T1y4h3u0X3y4e0N6T1k6r3p5J5y4o6M7H3k6X3j5K6k6r3c8W2k6e0j5J5k6o6l9^5j5K6M7&6y4$3t1H3x3o6l9`.f35K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0N6Q4x3X3g2J5j5i4u0Q4x3V1j5^5z5r3f1H3y4U0M7I4j5e0t1$3x3o6k6T1z5e0u0T1k6X3x3^5j5X3x3%4y4o6p5$3j5U0M7J5j5K6q4V1z5e0p5K6x3K6k6W2k6X3y4W2y4h3p5H3y4o6N6T1x3o6p5`.d14K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0k6Q4x3X3g2J5j5i4u0Q4x3V1k6W2x3r3k6S2j5K6m8X3y4$3g2T1z5o6f1%4x3$3g2T1j5U0y4V1k6U0g2W2j5h3t1K6k6o6S2X3x3h3t1H3k6h3x3K6j5U0S2S2j5X3p5%4y4e0t1&6k6e0c8S2x3o6p5`.48fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0g2Q4x3X3g2J5j5i4u0Q4x3V1j5&6x3o6y4U0x3K6R3$3y4K6N6T1x3$3q4S2j5U0j5$3z5e0R3#2k6e0j5H3x3U0t1@1j5K6b7@1k6X3c8S2x3K6p5I4k6e0f1%4j5K6k6W2z5o6M7$3y4o6j5H3x3o6p5`.82fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0c8Q4x3X3g2J5j5i4u0Q4x3V1j5K6x3o6j5I4y4o6M7H3j5K6x3J5y4U0q4T1j5K6S2T1j5U0u0V1k6e0c8W2j5$3p5$3k6e0j5^5k6o6p5^5y4X3p5&6j5K6j5I4j5U0j5&6j5K6f1$3x3K6m8X3x3o6p5`.d49K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0y4Q4x3X3g2J5j5i4u0Q4x3V1k6W2x3o6R3@1j5X3f1$3z5o6M7^5z5r3y4U0y4e0p5H3x3h3p5$3y4r3y4X3x3o6b7$3j5K6g2U0y4o6m8T1j5U0y4V1y4o6j5#2k6U0V1J5y4K6p5&6j5K6t1^5x3o6p5`.b20K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0u0Q4x3X3g2J5j5i4u0Q4x3V1j5^5z5e0j5J5j5e0m8V1y4U0y4X3x3U0b7^5j5e0l9H3x3K6j5@1y4o6t1#2k6e0f1I4k6e0k6U0x3K6m8W2y4$3c8U0y4$3u0W2j5e0V1^5y4K6g2W2y4r3p5$3x3o6l9`.7bcK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3e0q4Q4x3X3g2J5j5i4u0Q4x3V1j5K6y4o6b7&6y4e0c8S2x3K6V1@1y4o6m8V1k6h3t1I4j5$3t1K6j5X3q4S2x3r3u0T1k6o6R3$3y4U0S2T1k6U0N6T1z5r3k6S2x3r3p5I4y4e0f1K6k6r3k6V1x3o6l9`.05cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3#2)9J5k6i4u0S2M7W2)9J5c8X3y4T1k6r3j5J5z5o6p5H3x3e0p5^5y4U0M7^5y4U0p5$3x3U0W2S2x3o6q4T1k6r3f1&6x3$3x3J5x3K6u0V1y4e0b7J5x3U0g2T1j5K6f1^5y4h3x3H3k6o6V1H3x3l9`.`.986K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0z5g2)9J5k6i4u0S2M7W2)9J5c8U0c8W2k6e0S2X3x3h3g2W2x3$3f1#2k6e0t1K6x3o6y4W2j5U0t1&6z5r3b7K6z5o6f1^5k6U0t1J5z5r3q4T1z5h3c8S2x3K6N6X3j5e0b7I4y4h3t1H3k6h3p5H3x3l9`.`.f37K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0z5q4)9J5k6i4u0S2M7W2)9J5c8X3f1K6y4e0m8W2z5h3b7@1k6e0x3^5k6o6M7&6k6o6m8V1x3r3j5#2y4o6m8S2y4$3j5^5j5h3f1H3k6e0f1^5j5X3f1H3j5e0b7%4y4r3y4W2k6U0p5I4y4h3f1H3x3l9`.`.7f2K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0y4#2)9J5k6i4u0S2M7W2)9J5c8U0R3^5j5K6b7$3x3o6b7@1j5$3p5#2j5K6q4T1x3h3j5J5y4e0N6S2j5U0m8S2j5h3p5^5k6o6b7@1x3h3j5&6k6h3f1^5y4h3f1H3x3o6M7#2x3e0j5^5x3K6V1H3x3l9`.`.c98K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0y4W2)9J5k6i4u0S2M7W2)9J5c8U0x3@1k6h3y4W2j5h3t1^5y4r3j5H3z5r3j5%4y4$3j5$3y4U0u0V1y4U0W2X3j5$3j5K6y4K6S2V1k6o6W2T1y4K6t1J5j5e0f1#2y4r3t1I4j5X3t1^5y4K6V1H3x3l9`.`.e54K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0y4g2)9J5k6i4u0S2M7W2)9J5c8U0b7H3z5r3t1$3x3e0M7I4y4h3u0X3x3o6j5@1z5r3y4X3y4o6t1I4y4U0R3#2x3$3x3@1j5U0p5K6y4U0f1J5y4e0l9^5x3r3p5H3j5e0m8U0x3h3k6V1y4K6j5H3x3l9`.`.982K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0y4q4)9J5k6i4u0S2M7W2)9J5c8U0j5^5x3K6q4X3x3e0S2U0z5h3q4X3y4X3t1^5x3K6f1&6k6X3k6X3x3X3y4W2y4e0x3#2j5U0q4T1y4U0M7I4z5e0t1H3y4e0p5I4j5e0t1K6k6r3c8X3z5o6M7H3x3l9`.`.0cfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3U0m8Q4x3X3g2J5j5i4u0Q4x3V1k6S2z5o6b7#2y4K6l9^5y4K6k6T1z5e0k6V1k6r3y4W2k6e0f1K6j5U0R3J5x3o6p5I4x3r3j5J5z5o6p5^5y4e0R3^5x3r3x3$3z5o6f1H3x3o6f1%4k6o6l9^5x3o6t1`.b63K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3j5i4y4E0x3W2)9J5k6i4u0S2M7W2)9J5c8U0m8U0y4r3t1#2z5r3x3^5x3U0p5%4j5K6m8U0j5h3y4V1y4X3y4S2x3$3x3H3z5r3f1#2x3r3u0W2j5e0k6T1y4$3x3I4y4U0N6U0y4K6t1@1j5$3t1@1y4e0V1H3x3l9`.`.五、对于本次课题学习的几点建议 http://bbs.pediy.com/showthread.php?t=36164这次是小组建立以来的第一次课题！所以，用时两个星期，比较长，一是为了照顾新朋友，能抓紧补好自己的不足之处，二是为了让有基础的朋友，写一些基础的文章来帮助没有基础的朋友早点入门！以增进群里成员之间的交流！ 美丽の破船 2008年8月3日星期日
[培训]科锐逆向工程师培训第53期2025年7月8日开班！
