行业解决方案查看所有行业解决方案
IDA 用于解决软件行业的关键问题。
发布时间:2023-04-12 14: 48: 24
When you edit the segment boundaries, you can check the "move the adjacent segments" checkbox.
IDA will try to shrink/expand the previous segment in order to move the beginning of the selected segment. Of course, you cannot move the start of the segment 'too far':
- the segment must have at least 1 byte
- the start address of the segment must be less than the end of the segment
- no segments can be killed during moving
- the segment cannot have bytes with negative offsets
You cannot shrink a segment to zero bytes. A segment must have at least one byte.
This command is mostly used when IDA does not detect the boundary between segments correctly.
Sometimes, IDA creates 2 segments where only one segment must exist. In this case, you should not use this command. Use the following sequence instead:
- delete one segment.
Choose the one with the bad segment base value.
Do not disable addresses occupied by the segment being deleted.
- change boundaries of the other segment.
Caution: moving the first segment of the program will delete all information about the bytes between the old start of the segment and the new start of the segment!
See also another command that changes segment bounds:
Edit Segment
Edit|Segments submenu.
中文翻译如下:
当您编辑段边界时,您可以检查移动相邻段
复选框。
IDA 将尝试收缩/扩展之前的
段以移动所选段的开头。
当然,您不能将段的开头移动“太远”:
- 该段必须至少有 1 个字节
- 段的起始地址必须小于段的结尾
- 在移动过程中不能杀死任何片段
- 该段不能有带负偏移量的字节
您不能将段收缩为零字节。一个段必须有
至少一个字节。
这个命令多用于IDA没有检测到边界的时候
段之间正确。
有时,IDA 创建 2 个段,其中只有
一个段必须存在。在这种情况下,您不应使用此命令。
请改用以下顺序:
- 删除一段。
选择具有坏段基值的那个。
不要禁用被删除的段占用的地址。
- 改变另一段的边界。
注意:移动程序的第一段将
删除有关段旧开始之间字节的所有信息
和细分市场的新起点!
另请参阅另一个更改段边界的命令:
编辑片段
编辑|细分子菜单。
展开阅读全文
︾