Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  Opening a file using IDA.

Topic created on: May 12, 2009 07:14 CDT by teimaninja .

Hello,
A noob question (but I want to understand its meaning and not just do next to ignore it.)
When opening a new file in IDA I have the following question regarding the file:
Portable executable for 80386 (PE) [pe.ldw] / MS-dos executable [exe] [dos.ldw] / Binary file
1. What are the major differences between those?
2. Why IDA asks me to supply an answer?
3. What can happen/go wrong if I choose "wrong" pick?
4. How can I know what I need to pick when opening a file?
Thanks.

  sikke   May 12, 2009 07:26.52 CDT
> teimaninja: Hello,
> A noob question (but I want to understand its meaning and not just do next to ignore it.)
> When opening a new file in IDA I have the following question regarding the file:
> Portable executable for 80386 (PE) [pe.ldw] / MS-dos executable [exe] [dos.ldw] / Binary file
> 1. What are the major differences between those?

Just assume, if you are working under Windows (as you seem to be), that you have the first. Only antique DOS programs fall under the second one, and the last category means that IDA will do no real analysis. You just get a hex view.

> 2. Why IDA asks me to supply an answer?
Because sometimes all 3 are possible, and it doesn't want to choose for you.... If you want to do standard analysis, choose the first one (except for old DOS stuff).

> 3. What can happen/go wrong if I choose \"wrong\" pick?
Nothing. Close and do not save, and then reopen with the other choice.

> 4. How can I know what I need to pick when opening a file?

The first option (default) is almost always what you want.

> Thanks.

  teimaninja   May 12, 2009 07:41.38 CDT
Great Sikke thanks for the quick and detailed answer.
Yes I'm working under windows. Just downloaded the IDA freeware and I'm looking forward to get more knowledge about the RE filed and IDA in particular.
I hope also to contribute for this forum as soon as I can.

Note: Registration is required to post to the forums.

There are 31,325 total registered users.


Recently Created Topics
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23


Recent Forum Posts
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
let 'IDAPython' impo...
bytecod3r
Reverse Engineering ...
bytecod3r
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit