oalabs
patreon
IDA Reverse Engineering - Module 1
🕑 Added 2025-01-20 15:00:14 +0000 UTCModule 1, Part 1 of our IDA reverse engineering series. A step by step guide to marking up Windows PE binaries using IDA. In this tutorial we open our sample DLL in IDA and mark up the DLLEntryPoint and DLLMain.
This is a very basic tutorial that introduces the concept of Function Definitions, Types, variable Names, Enums, and Type Libraries.
Sample
93f9703cc7339014cd1bc82da0ab8909957112b93fba2430b5ee90a1d424a5ed
References
DLL Main
https://learn.microsoft.com/en-us/windows/win32/dlls/dllmainEnums
https://hex-rays.com/blog/igors-tip-of-the-week-99-enumsType Libraries
https://hex-rays.com/blog/igors-tip-of-the-week-60-type-libraries
Below is an IDA cheat sheet from @fr0gger_ which is helpful when trying to remember the hot keys.
Comments
OALABS
Yes! Everything in that collection is a good watch if you want more information on what is going on with the boilerplate code https://www.patreon.com/collection/894522?view=expanded
justin thattil
Hi Are these the 2 videos on c runtime environment analysis: https://www.patreon.com/posts/c-strings-and-c-116533633 https://www.patreon.com/posts/x64dbg-scripting-117988707 Thanks for the informative tuts as always, Cheers!
OALABS
https://github.com/OALabs/swicons
m4n0w4r
Lolz, I spotted some strange IDA icons in your taskbar :))
mohamed mansaray
Enum!!!!!!! This is a good one
Cam
This is amazing. Can't wait for the next video!
