مهندسی معکوس نرم افزار

Software Reverse Engineering
Introduction
IA-32 CPU Architecture Basics
Basic Concept :
Functions
Process
Function Calling
Stack Frames
Calling Conventions
Reading EIP
Heaps
Handles
Exceptions
Ring3 Structures
Windows APIs
Hex editor
Decompiler
Disassembler
Debugger
System Monitoring
API Monitoring
VA – RVA – Offset
PE(Portable Executable) Structure
Memory And File Alignment
Reverse Engineer Techniques:
Patching
Serial Fishing
Keygenning
String References & Basic Patching
Manual Byte Patching
MessageBox API
String Encryption
Code Validation
Registry Key
File Manipulation
Anti Reversing Concept And solution:
Anomaly Debugger Detection
Debugger Name Detection
Process Debugger Detection
Parent Process Detection
Module Debugger Detection
Code Execution Time Detection
Software Breakpoint Detection
Hardware Breakpoint Detection
SEH(Safe Exception Handling)
VM Detection
ASLR(Address Space Layout Randomization)
Obfuscation
Packer and Manual Unpacking
Multi-Thread Applications
Malware Analysis Fundamentals
Malicious PDF file analysis
VBA macros in Office documents
Malicious RTF file
Understanding shellcode
Deobfuscating malicious JavaScript scripts
Recognizing packed Windows malware
Dumping packed malware from memory
Analyzing Fileless malware
Analyzing .NET malware
Code injection techniques
Process hollowing
Bypassing Debugger detection By Malware