Editing 52455645525345 (section)

=== Reverse Engineering for beginners ===

{{Event
|Title=52455645525345
|Description=Reverse Engineering Workshop
|Type=Workshop
|Date=2018-07-16
|Start=18:00
|Host=barbieauglend
|isRelevant=Yes
}}

==== Requirements for the RE workshop: ====

- Virtual machine software (VMWare, VirtualBox etc...)
- Windows 7 guest system with IDA Pro (Free 5.0 is acceptable)
- Microsoft Visual Studio 2008 redistributable package

Let's dive into the black hole of compiled code and understand the internals of the software running on our computer. It doesn't matter if you want to fix a broken gadget or save your files (now you know why to backup, right!?) from ransomware, it is elementary to understand how they work. This is Reverse Engineering (RE), and it is done every day from recreating outdated and incompatible software, understanding malicious code, or exploiting weaknesses in software.

We are going to try to cover topics like:

* Uses for RE
* The tricks and pitfalls of analyzing compiled code
* Identifying calling conventions
* How to navigate x86 assembly using IDA Pro
* Identifying Control Flows
* Identifying the Win32 API
* Using a debugger to aid RE
* Dynamic Analysis tools and techniques for RE

I am going to bring some nice binaries which we can go through together. We are going to explore how static reverse engineering works and how can we use it to understand what a piece of malware does (hopefully).

==== Participants ====

* {{U|Ilias}}
* {{U|hanemile}}
* divado
* r2co
*ocyphert
* harryr