行业解决方案查看所有行业解决方案
IDA 用于解决软件行业的关键问题。
发布时间:2022/10/14 17:26:48
When IDA encounters an instruction which changes a segment register, it creates a segment register change point. So, mostly change points are maintained by IDA itself. IDA assumes that the segment registers do not change their values between change points. If you find out that IDA failed to locate a segment register change, or if you want to change a register value, you can create a change point using Change Segment Register command. You can change the value of a segment register using Set default segment register value command too.
IDA classifies the change points. In the list of the change points, you can see the following postfixes after the register values:
a (auto) - Created by IDA. May be changed by IDA afterwards.
u (by user) - Created by user. IDA will not change it.
IDA generates the appropriate 'assume' instructions for the change points if it was not disabled by the corresponding command.
读者也喜欢这些内容:
iOS应用逆向工程学习必看专业书
对于想要深入学习了解iOS应用的逆向,你一定要深入研究的教科书分享给大家。...
阅读全文 >
索尼IPELA引擎IP摄像机中的后门
SEC Consult在Sony IPELA Engine IP Cameras中发现了一个后门,主要被企业和当局专业使用。...
阅读全文 >
CS马伪装下的loader样本分析
本文是一篇样本分析实战案例分享,对以下样本进行全面的逆向分析,非常有参考意义。...
阅读全文 >
Linux挖矿病毒的清除与分析
本文通过对Linux服务器出现访问卡顿的问题入手分析,完成了对挖矿病毒的清除工作,对所涉及的样本进一步分析和排查。...
阅读全文 >