Hot answers tagged

1

I think you are looking for something called FLIRT signature. You can use them to identify common definitions from various libraries. You just need to download the flirt signatures, and let IDA do the work. A public flirtdb repo can be found on github here. You can search for others on google too. Edit: My bad, totally missed out the ARM linux part. ...


1

Either put the PDB in the same folder as the executable, or use File->Load file->PDB file (after opening the .EXE in IDA) to load the PDB from whatever path you like on the disk.


1

This is an unconditional branch (thumb) It is encoded as 11100|signed 11-bit immediate offset E 7 D 2 1110 0111 1101 0010 so your 11-bit offset is 0b11111010010. This is sign extended to -46 The operation is: PC = PC + (SignExtend(signed_immed_11) << 1) where the first PC contains the address of the branch plus 4. 0x176E4 + 4 + (-46 * 2) ==...


1

I needed to type A on the string.


1

No. Only interactive user actions can be undone via the UI or keyboard shortcut.


Only top voted, non community-wiki answers of a minimum length are eligible