Thread: Tips on reverse engineering mixed .NET/native binaries?
View Single Post
  #6  
Old 10-30-2019, 13:58
toro toro is offline
VIP
  
Join Date: Aug 2004
Posts: 190
Rept. Given: 4
Rept. Rcvd 97 Times in 34 Posts
Thanks Given: 29
Thanks Rcvd at 161 Times in 52 Posts
toro Reputation: 97
in dnspy you can see RVA of native functions just above the function definition.
if program use calli- usually call a method of c++ class- you can find the constructor of class RVA first then continue in ida or your debugger.
Reply With Quote
The Following User Says Thank You to toro For This Useful Post:
niculaita (10-31-2019)