I'm new and would like to learn more about reverse engineering, but I'm running Windows 7 64-bit. Is WinDbg my only free option? I'd really like to try olly, but apparently that won't work.

If anyone has some advice, I'd like to hear it!

Olly can be fixed using Stealth64 (a plugin done by revert). Imports can be fixed using ChImpRec.

I have Stealth64 and have been googling for the past 20 minutes and can't figure out how the heck to install it or any plugin in ollydbg. I created a plugin folder, put the dll in it and can't find anywhere in the olly options on how to specify the plugin folder.

Hello,

And welcome to this forum. Hope you find what you are looking for.

To start off, a 64-bit OS is not quite ideal for new reversers. Registers, memory caches, even the debugging methods are different for a 64-bit OS. Whereas, what I am assuming you want to do, is crack programs; programs that are still written for 32-bit.

My recommendation is to downgrade from your 64-bit OS to 32-bit.

In event that is not possible, you can install VMWare and have a 32-bit OS running inside. Also, Windows XP is quite good as the OS of choice inside the VMWare (my personal opinion, of course --- mileage may vary).

Subsequently, you can find cracked versions of IDA 5.5 Advanced, along with the Hex-rays decompiler v1.1 all over the web. You need not spend your time, then, looking for ways to coax your tools to work. Rather, you can then focus on cracking.

Hope you have read +ORC tuts. They are a little outdated, but will give you *some* idea. The topics on dead listing are quite good.

What else can I say, except, best of luck on your journey, don't give up and do frequent this board.

Have Phun

Thanks for the reply, Aimless!

I'm interested in advancing my reverse engineering of malware knowledge beyond just behavioral analysis by first practicing code analysis on legitimate programs. I'd love to try IDA 5.5, but I'd love to keep my Windows 7 box as malware free as I can even more than trying IDA 5.5; cracked software is just too risky for me.

Since it's strictly for educational purposes, I'll take your advice and get a copy of XP and run it in VMware. Thanks for pointing me in the right direction!

Hello,

I know it doesn't embed the 64-bit version, but IDA Pro freeware is available on the official website, it's the 5.0 version (better than nothing).