行业解决方案查看所有行业解决方案
IDA 用于解决软件行业的关键问题。
发布时间:2022-09-29 11: 02: 21
When IDA encounters an instruction which changes a segment register,it creates a segment register change point.So,mostly change points are maintained by IDA itself.IDA assumes that the segment registers do not change their values between change points.If you find out that IDA failed to locate a segment register change,or if you want to change a register value,you can create a change point using Change Segment Register command.You can change the value of a segment register using Set default segment register value command too.
IDA classifies the change points.In the list of the change points,you can see the following postfixes after the register values:
a(auto)-Created by IDA.May be changed by IDA afterwards.
u(by user)-Created by user.IDA will not change it.
IDA generates the appropriate'assume'instructions for the change points if it was not disabled by the corresponding command.
中文翻译如下:
当IDA遇到改变段寄存器的指令时,它会创建一个段寄存器变化点。所以,大多数变化点都由IDA自己维护。IDA假设段寄存器在变化点之间不会改变其值。如果您发现IDA无法找到段寄存器的变化,或者想要更改寄存器的值,则可以使用Change Segment Register命令创建一个变化点。您也可以使用Set default segment register value命令更改段寄存器的值。
IDA对变化点进行分类。在变化点列表中,您可以看到在寄存器值后面的以下后缀:
a(自动)-由IDA创建。之后可能会由IDA更改。
u(由用户)-由用户创建。IDA不会更改它。
如果未被相应命令禁用,则IDA会为变化点生成相应的“assume”指令。
展开阅读全文
︾