IDA Reverse Engineering - Module 1
Added 2025-01-20 15:00:14 +0000 UTCModule 1, Part 1 of our IDA reverse engineering series. A step by step guide to marking up Windows PE binaries using IDA. In this tutorial we open our sample DLL in IDA and mark up the DLLEntryPoint and DLLMain.
This is a very basic tutorial that introduces the concept of Function Definitions, Types, variable Names, Enums, and Type Libraries.
Sample
93f9703cc7339014cd1bc82da0ab8909957112b93fba2430b5ee90a1d424a5ed
References
DLL Main
https://learn.microsoft.com/en-us/windows/win32/dlls/dllmainEnums
https://hex-rays.com/blog/igors-tip-of-the-week-99-enumsType Libraries
https://hex-rays.com/blog/igors-tip-of-the-week-60-type-libraries
Below is an IDA cheat sheet from @fr0gger_ which is helpful when trying to remember the hot keys.
Comments
Yes! Everything in that collection is a good watch if you want more information on what is going on with the boilerplate code https://www.patreon.com/collection/894522?view=expanded
OALABS
2025-01-28 03:06:26 +0000 UTCHi Are these the 2 videos on c runtime environment analysis: https://www.patreon.com/posts/c-strings-and-c-116533633 https://www.patreon.com/posts/x64dbg-scripting-117988707 Thanks for the informative tuts as always, Cheers!
justin thattil
2025-01-28 02:55:50 +0000 UTChttps://github.com/OALabs/swicons
OALABS
2025-01-23 19:22:16 +0000 UTCLolz, I spotted some strange IDA icons in your taskbar :))
m4n0w4r
2025-01-23 08:36:38 +0000 UTCEnum!!!!!!! This is a good one
mohamed mansaray
2025-01-22 12:59:18 +0000 UTCThis is amazing. Can't wait for the next video!
Cam
2025-01-22 00:25:25 +0000 UTC
