The corresponding relationship can be found in the legend below. **Navigation Bar: **The navigation bar includes a linear view of the loaded binary address space with color pseudo-codes. Local link: the link to the destination address of the jump instruction, such as loc_40107E.Sub-link: the link at the beginning of a function, such as printf.**Use links and cross-references: **There are several common link types in IDA: Structure window: List the structure layout of all active data.Export table window: List all export functions of a file, generally used to analyze DLL files.Import table window: List all import functions of a file.You can modify this attribute by right-clicking on the string window and selecting Setup. By default, ASCII strings longer than 5 characters are displayed. Name window: List the name of each address, including functions, named codes, named data, and strings.Each function in this window is associated with some flags, such as LIt means that this function is a library function. You can sort by the length of the function to filter out some large-scale and interesting functions. **IDA window distribution: **Function window: List all functions in the executable file and display the length of each function. Red indicates that a conditional jump has not been adopted, green indicates that this conditional jump is adopted, and blue indicates that an unconditional jump is adopted, and the upward arrow is the same Represents a loop condition. Graphic mode: In graphic mode, the color and direction of the arrow show the flow of the program.The solid line marks the unconditional jump, the dotted line marks the conditional jump, and the upward arrow represents a cycle. Text mode: The left part of the text mode is called the arrow window, which shows the non-linear flow of the program.
Ida pro python api pro#
IDA Pro (Interactive Disassembler Professional Edition) is an extremely powerful disassembler, the first choice of many malicious code analysts, reverse engineers and vulnerability analysts. How to use IDA Pro Original link: usage method/ Knowledge points
0 kommentar(er)
