IDA
Assembly Absolute JMP/CALL to Relative JMP/CALL Tool/Plugin?
I have this program I\'m trying to reverse engineer. I don\'t know whether or not it was the compiler\'s optimizer or obfuscation, but now some parts of the code that call other functions are calculat[详细]
2023-04-04 17:46 分类:问答Modifying and Saving in IDA
Is it possible to add code to a current binary in IDA and then save then to recompile 开发者_如何学Pythonthe binary? I\'ve looked over Google, but no suggestions as to whether IDA can do this. If not,[详细]
2023-04-04 04:10 分类:问答disassembling, changing and assembling DLL file
I have a DLL which I have disassembled, and just to test that my project is going to work. I have tried assembling it again but without luck.[详细]
2023-03-29 17:26 分类:问答Base addresses not the same
When I load up an executable in IDA pro and OllyDbg, the addresses of the same inst开发者_运维百科ructions start up at different locations. This could be because they are different base addresses. I w[详细]
2023-03-15 13:16 分类:问答IDA pro asm instructions change
I just want to know how I can change asm instructions in the IDA-view A: How to edit instructions(for instance: jnz to jmp)?[详细]
2023-03-12 17:33 分类:问答C++ name mangling by hand
I am writing a script for the IDA Pro disassembler in Python using the idapython plugin. Using this, I am able to fill in the gaps where IDA\'s auto-analysis falls short.[详细]
2023-02-04 07:15 分类:问答IDA Pro, QT Nokia Library, dll call, what is it actually doing?
I have reversed a dll using IDA Pro.Looking at the pseudocode generated by IDA i am interested in a set of calls into the QT library, is it trying to find the location of functions so that it can call[详细]
2023-02-01 17:10 分类:问答IDA pro 'this' keyword
I am wondering what the exact meaning of the \'this\' keyword is in the IDA pro pseudo c++ code. Lets say that I have a function call:[详细]
2023-01-31 22:34 分类:问答IDA pro: apply signatures on unknown_libname_x functions?
When applying signatures IDA pro will name some functions unknown_libname_x. These functions reflect a library function that IDA doesn\'t have enough details on. Often, however, other signatures may h[详细]
2023-01-30 13:54 分类:问答What's going on here: v5 = *(_Byte *)(this + 4)?
I am looking at a code dump from IDA pro.There is a function which as this layout: garbled_name(int this...[详细]
2023-01-28 15:44 分类:问答