Ida Pro 的默认设置里对中文字串的支持比较差,对于首字节大于'EO'的都显示成?了.其实...
打开IDA PRO 的./CFG/IDA.CFG
看到如下:
.........................cut..............................
// the following characters are allowed in ASCII strings, i.e.
// in order to find end of a string IDA looks for a character
// which doesn't belong to this array:
// (cp866 version)
AsciiStringChars =
"\r\n\a\v\b\t\x1B"
" !\"#$%&'()*+,-./0123456789:;<=>?"
"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
"`abcdefghijklmnopqrstuvwxyz{|}~"
"????????????????
"_、￥ウЖ┆???辈炒刀犯购患骄?quot;
"懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
"噌忏溴骁栝觌祉铒";
// (full version)
//AsciiStringChars =
// "\r\n\a\v\b\t\x1B"
// " !\"#$%&'()*+,-./0123456789:;<=>?"
// "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
// "`abcdefghijklmnopqrstuvwxyz{|}~"
// "????????????????
// "_、￥ウЖ┆???辈炒刀犯购患骄?quot;
// "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
// "噌忏溴骁栝觌祉铒瘃蝮趱鲼????";
// the following characters are allowed in user-defined names:
.........................cut..............................
把// (cp866 version) 到// (full version)之间的行用 '//'注释掉
把// (full version) // the following characters are allowed ..之间的行前面的 '//'去掉,保存,重新运行IdaPro,呵呵,汉字真好...
有兴趣的朋友可以再研究一下这个 ;-)
XlatAsciiName =
/*00..0F*/ "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"
/*10..1F*/ "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F"
/*20..3F*/ " !\"# %&'()*+,-_/"
"0123456789:;<=>?"
/*40..5F*/ "@ABCDEFGHIJKLMNO"
"PQRSTUVWXYZ[\\]^_"
/*60..7F*/ "`abcdefghijklmno"
"pqrstuvwxyz{|}~"
/*80..9F*/ "ABVGDEJZIIKLMNOP"
"RSTUFXCCSS I AUQ"
/*A0..BF*/ "abvgdejziiklmnop"
"氨渤吹斗腹夯冀究"
/*C0..DF*/ "懒旅呐魄壬仕掏蜗"
"醒矣哉肿刭谯茌捱"
/*E0..FF*/ "rstufxccss i auq"
"瘃蝮趱鲼????";
[课程]Linux pwn 探索篇！
