Description
The ability of a reverse engineer to identify the use of structures and calling conventions will greatly enhance their ability to analyze a program from disassembly. This lab will require the student to identify the use of structures, create custom structures in IDA Pro and identify calling conventions.
Lab – Complete the following tasks
- Identify the use of the structure, what is the size of the structure?
- Create a structure in IDA that represents the identified structure. Ensure that each member of your structure aligns with how it is used in the program.
- Rename the members to something appropriate based off of your analysis.
- In IDA View-A, add the structure offsets for each variable used.
There is a single regular function called in main, what calling convention does it use? What does it expect as an argument?
