Hot answers tagged

3 votes
Accepted

IDA Pro Export C style array using Python instead of GUI menu

Because this is a relatively basic functionality, there's not builtin way to call that command from IDAPython. You could do some Qt trickery to fake that GUI menu being clicked by the user, but that ...
NirIzr's user avatar
  • 11.8k
3 votes

How to get array size of a global variable using IDApython?

An array is an example of a data item. Like all items in IDA (the other item type is instruction), it has a starting address (head) and size. You can retrieve the whole item's size using the function ...
Igor Skochinsky's user avatar
  • 36.5k
2 votes

How do I reverse engineer structs that are put as parameters in a function

The function's name isn't struct dynamic_array. The function's name is Mesh::CalculateBoneBindPoseBounds. The function accepts an argument of type struct dynamic_array<...>. There's no function ...
NirIzr's user avatar
  • 11.8k
2 votes
Accepted

Odd convention for accessing elements of an array?

It looks like that it is array of structures, where v3 is an index and 0xfff is used to avoid overflow. I'd suggest that the array was originally defined with size 0x1000. The size of a structure ...
w s's user avatar
  • 8,448
1 vote
Accepted

IDA Decompiler generates wrong output on array of structures!

I found the solution for this issue, and post it here hope help someone someday... I undefined the "arr_of_struct" (Ctrl+U), undefined both the array and also the structure variable: ====&...
E.A's user avatar
  • 171
1 vote
Accepted

RE4B challenge 65: how to determine the first dimension of the array?

According to the given code here, I don't think its possible to recover the third dimension. _array$ = 8 _x$ = 12 _y$ = 16 _z$ = 20 _f PROC mov eax, DWORD PTR _x$[esp-4] mov edx,...
sudhackar's user avatar
  • 2,639
1 vote

How to convert IDA Pseudo code casts to Array

If old pseudocode looks like this int __cdecl main(int argc, const char **argv, const char **envp) { signed int i; int v5; __int64 v6; v6 = 5208208757389214273LL; v5 = 0; for ( i = 0; ...
sudhackar's user avatar
  • 2,639
1 vote

Hex-Rays decompiles array to int

I'm not sure I understand the problem, but if you want to transform a1 to pointer type just pass cursor on the function prototype, press Y and edit the type of the function argument to, for example, ...
w s's user avatar
  • 8,448
1 vote

Does hex-rays support VLA in any way?

It looks like Hexrays does not support this. Following the instructions for variable-length arrays (https://www.hex-rays.com/products/ida/support/tutorials/varstr/index.shtml) shows that it does work ...
Zach Riggle's user avatar
  • 2,337

Only top scored, non community-wiki answers of a minimum length are eligible