[for-Biggeners] identify WinMain function in Ghidra
by zelda - Friday February 9, 2024 at 11:16 PM
#1
there is many methods for identifying the main function on C/C++
one of them is to identify the compiler so you can use it for your advantage
You can use IDA Pro Free to de-compile the source code on the cloud
But in This Post we will use Ghidra to identify WinMain function in C++
 
there is some notes make it in your concern  to understand the different between Main() and WinMain() and DllMain() in C/C++
1- WinMain() is Used For GUI (Non-Console ) Application.
2- Main() is Used For (Non-GUI) Application console Based .
3-DllMain() Is Used For a Dll's.
 
Before going into The Main Subject which is "simple"
let's take a pref look for the Compile Unicode
- in Windows programming, there are two main entry points for Windows applications: wmain and WinMain
The wmain entry point is used for Unicode (wide-character) applications,
The WinMain entry point is used for ANSI (narrow-character) applications
[Image: 1.png]
[Image: 2.png] 
[Image: 3.png] 
[Image: 4.png]
Zelda
Reply
#2
Nice share <3
Ghidra is great, happy to see it is getting as much love as IDA these days.
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Reply
#3
isn't it already added detected by default in modern versions ? IDA does that.
Reply
#4
Interesting quick read
Reply


Forum Jump:


 Users browsing this thread: