IDA Reverse Engineering - Module 1

Module 1, Part 1 of our IDA reverse engineering series. A step by step guide to marking up Windows PE binaries using IDA. In this tutorial we open our sample DLL in IDA and mark up the DLLEntryPoint and DLLMain.

This is a very basic tutorial that introduces the concept of Function Definitions, Types, variable Names, Enums, and Type Libraries.

Sample

93f9703cc7339014cd1bc82da0ab8909957112b93fba2430b5ee90a1d424a5ed

References

• DLL Main
  https://learn.microsoft.com/en-us/windows/win32/dlls/dllmain

• Enums
  https://hex-rays.com/blog/igors-tip-of-the-week-99-enums

• Type Libraries
  https://hex-rays.com/blog/igors-tip-of-the-week-60-type-libraries

Below is an IDA cheat sheet from @fr0gger_  which is helpful when trying to remember the hot keys.