首页
论坛
课程
招聘
[转帖]Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA
2021-1-10 11:38 949

[转帖]Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA

2021-1-10 11:38
949

Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA

https://www.hex-rays.com/blog/igors-tip-of-the-week-21-calculator-and-expression-evaluation-feature-in-ida/

When reverse-engineering, sometimes you need to perform some simple calculations. While you can always use an external calculator program, IDA has a built-in one. You can invoke it by pressing  or via View > Calculator.


The calculator shows the result in hex, decimal, octal, binary and as a character constant. This information is also duplicated in the Output window in case you need to copy it to somewhere else.

In addition to plain numbers, you can use names from the database, as well as register values during debugging similarly to the “Jump to address” dialog from the previous tip.

By the way, the number, address, or identifier under cursor is picked up automatically when you press ? so there’s no need to copy or type it manually.

In fact, the expression evaluation feature is provided by the IDC language interpreter built-in into IDA. You can use expressions in almost any place in IDA that accepts numbers: Jump to address, Make array, User-defined offset and so on.


You can also use any of the available IDC functions. For example, expressions like the following are possible during debugging:



[2022冬季班]《安卓高级研修班(网课)》月薪三万班招生中~

最后于 2021-1-10 11:45 被linhanshi编辑 ,原因:
收藏
点赞2
打赏
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回