Location:
Search - IDA
Search list
Description: 文件有两种,一种是文本文件,一种是程序二进制文件,不管哪种文件都可以用十六进制编码来显示,称为hex文件。
1、文本Hex文件一般不需要转成C语言,更多的是程序二进制文件,用十六进制显示,可以转换成C语言,一般使用相应的反汇编程序来实现,这方面的工具很多,不同的平台略有不同。Windows平台一般常用的OllyDbg、Windbg、IDA,Linux平台使用最多的是GDB和Linux版的IDA(There are two kinds of files, one is a text file, the other is a program binary, which can be displayed in hexadecimal code, known as hex files.
1, text Hex file generally do not need to switch to the C language, is more of a binary program, using hexadecimal display, can be converted to the C language, generally use the corresponding disassembler to implement, this tool is very much, different platforms is slightly different.The most commonly used Windows platforms are OllyDbg, Windbg, IDA, and the most widely used Linux platforms are the GDB and the Linux version of IDA.)
Platform: |
Size: 79872 |
Author: 123456789000 |
Hits:
Description: 使用到的工具 IDA6.0 LordPE C32Asm
由于自己写了个MemoryLoader注入所以一开始考虑的是找不到hyxd.exe进程导致的注入失败
后修改为FindWindow通过窗口标题注入进程也无法正常使用 于是打开IDA 分析DLL流程(DLL Hook FindWindowA)
Platform: |
Size: 2448384 |
Author: 城主呐 |
Hits:
Description: deobfuscate assembly code in ida
Platform: |
Size: 578560 |
Author: nucadipayo |
Hits:
Description: ida assembly code for malware analysis
Platform: |
Size: 22528 |
Author: nucadipayo |
Hits:
Description: 易达外贸建站系统(以下简称易达Trade),是一款简单、实用、高效的外贸企业网站建站软件。易达Trade是基于微软的WINDOWS IIS平台,采用ASP语言ACCESS数据库开发完成。(Yida foreign trade establishment system (hereinafter referred to as IDA Trade) is a simple, practical and efficient website building software for foreign trade enterprises. VTech Trade is Microsoft's IIS platform based on WINDOWS, using ASP language ACCESS database development.)
Platform: |
Size: 1756160 |
Author: 4y5hergs |
Hits:
Description: IDA Pro signatures for FlexLM SDK 11.11.1
Platform: |
Size: 190464 |
Author: fredkin |
Hits:
Description: hexray libs for windows 7
Platform: |
Size: 618 |
Author: artgamedev@mail.ru |
Hits:
Description: idppython 的入门教程,非常适合新手入门(Idppython introductory tutorial, very suitable for beginners.)
Platform: |
Size: 897024 |
Author: err0i |
Hits:
Description: IdaPro Version 6.5 From PC6.
IDA is an interactive disassembler, which means that the user takes active participation in the disassembly process. IDA is not an automatic analyzer of programs. IDA will give you hints about suspicious instructions, unsolved problems etc. It is your job to inform IDA how to proceed.
If you are using IDA for the very first time, here are some commands that you will find very useful:
- convert to instruction : the hotkey is "C"
- convert to data : the hotkey is "D"
All the changes that you made are saved to disk. When you run IDA again, all the information on the file being disassembled is read from the disk, so that you can resume your work.
For other commands please refer to the menu system and the help
Platform: |
Size: 107793293 |
Author: SMMAd_230 |
Hits:
«
1
2
...
9
10
11
12
13
14»