行业解决方案查看所有行业解决方案
IDA 用于解决软件行业的关键问题。
发布时间:2023-06-05 15: 01: 23
Action name:SetAuto
This command allows you to disable and enable the autoanalysis and its indicator.
Usually,the auto analysis is enabled.Disable it if you are sure that it will help you.
Here you can change various kernel analysis options 1 and options 2 and options 3,change the processor type(if the processor module supports several types),or the assembler style.If the current processor has options,there will also be a button to change processor-specific options.If the current processor supports memory mapping,there will also be a button to change the memory mapping ranges.
The analysis indicator is located in the bottom left corner of the main IDA window(upper right corner in text verion).Possible values of the indicator:
""empty indicator means that the indicator is turned off.
AU:idle Autoanalysis is finished.
AU:disabled Autoanalysis is disabled.
FL:
execution flow is being tracedPR:
a function is being createdTL:
a function tail is being createdSP:
the stack pointer is being tracedAC:
the address is being analyzedLL:
L1:
the first pass of FLIRTL2:
the second pass of FLIRTL3:
the third pass of FLIRTTP:
type information is being appliedFI:
the final pass of autoanalysisWF:
weak execution flow is being traced??:
the address becomes unexplored:
Hint:you can right-click the analysis indicator to quickly disable or enable it,or to reanalyze the program.
以下为中文翻译:
动作名称:SetAuto
此命令允许您禁用和启用自动分析
及其指标。
通常,启用自动分析。
如果您确定它会帮助您,请禁用它。
这里可以更改各种内核分析选项1
以及选项2和选项3,
更改处理器类型(如果处理器模块支持多种类型),或者
汇编风格。
如果当前处理器有选项,也会有一个按钮
更改特定于处理器的选项。
如果当前处理器支持内存映射,会有
也是一个按钮来改变内存映射范围。
分析指示器位于IDA主窗口的左下角(文本版本为右上角)。
指标的可能值:
empty indicator表示指示灯已关闭。
AU:idle自动分析完成。
AU:禁用自动分析被禁用。
FL:
正在跟踪执行流程创建一个函数
创建函数tail
跟踪堆栈指针
分析地址
LL:
L1:<地址>FLIRT的第一关
L2:<地址>FLIRT的第二遍
L3:<地址>FLIRT第三关
TP:
类型信息正在被应用自动分析的最终通道
WF:
weak execution flow is being traced??:
该地址未被探索:
提示:您可以右键单击分析指示器以快速禁用或启用它,或者重新分析程序。
展开阅读全文
︾