IDA Pro

IDA (Interactive Disassembler) by DataRescue (www.datarescue.com) is

ILDasm

WinDbg

PEBrowse Professional Interactive

Kernel-Mode Debuggers
FileMon

TCPView

TDIMon

RegMon

PortMon

WinObj This tool presents a hierarchical view of the named objects in

Process Explorer Process Explorer is like a turbo-charged version of the

DUMPBIN

PEView

http://www.learn2crack.com/

http://woodmann.net/krobar/

http://www.crackfind.com/

http://www.cracksearchengine.net/

http://astalavista.box.sk

http://ttdown.com/

Dream to come true

In development: Andromeda and Boomerang

Unpacking:
Unpacking is becoming a bigger part of reverse engineering. Many companies are
choosing to pack or protect their programs to discourage people from reversing them.
Because the packer used for this program is so popular, the method we are going to use to
unpack it is not exclusive to this tutorial. In fact look for a tutorial by Ferrari on
System Mechanic for more information on this method.

http://www.mujweb.cz/www/komsbomb/article/x86reg.htm - basic information on

registers
http://www.swansontec.com/sregisters.html - Information on how registers are used and
what for.