Tips on reverse engineering mixed .NET/native binaries?

[zeffy]

I generally use CFF Explorer, dnSpy, and IDA (open as native PE) for reversing mixed mode assemblies.

The RVAs of native functions called from managed code can be located by name in the .NET metadata table, so you can navigate to them quickly in IDA (in CFF Explorer, .NET Directory -> MetaData Streams -> #~ -> Tables -> Method). At least for me, this made the reversing process quite a bit easier.