Hot answers tagged

2 votes
Accepted

How to hide Remote Windows Debugger in IDA Pro?

I already found a solution to my problem: plugin for IDA Pro: ScyllaHide (active fork)
  • 111
2 votes
Accepted

Reverse function in .rdata field

Before I answer the question you asked, let me answer the question that you probably meant to ask: What are I/O completion ports on Windows or in general? There is little point in attempting to chase (...
  • 10.6k
2 votes

How to make pseudocode in IDA more human readable

To make the listing more human-readable, you just need to add structure definitions, for example: type of variable rax35 - obviously not unsigned int there should be a pointer to the structure you ...
  • 111
1 vote
Accepted

Function pointer as struct field in IDA

The first problem in your example is that the fields are defined as bytes, not dwords. Press D twice on those fields to turn them into dwords. The second problem is that the fields don't have proper ...
  • 8,084
1 vote

How to use IDA pro to find ALL strings in am exe file?

Most likely, the problem is that there are different encodings in one exe file. However, you can customize the display of the encodings you need at any time.
  • 111
1 vote

How to create a function graph in IDA? Could not find grapher (Linux)

qwingraph is an alternative (and the default) graph viewer for IDA in linux, and it requires installation to function. Install qwingraph from the site below, and then set ida.cfg to use qwingraph: git ...
  • 43
1 vote

NEC 76F004GD Disassembly

Toyota diesel ECU can be disassembly with Ghidra and Renesas V850 module https://github.com/esaulenka/ghidra_v850 (E850v3). I think IDA can also disassembly Toyota Renesas V850 structure but i haven't ...

Only top scored, non community-wiki answers of a minimum length are eligible