Chris Eagle
  • Member for 7 years, 11 months
  • Last seen more than 7 years ago
IDA Pro: How to export data to C style array?
10 votes

Old question, but as of IDA 6.5, there is a new menu option Edit/Export data... that handles this situation for you. First select the data you wish to export then, via the menu option, choose the ...

View answer
How could I change an instruction in IDA Pro?
7 votes

If you goal is to push the changes back to the original binary, then for IDA 6.1, your best bet is to use a combination of the Edit/Patch Program menu and the editing capabilities of the Hex View ...

View answer
Recompile the asm file IDA pro created
Accepted answer
7 votes

Many years ago I wrote a very crude script to dump the current (as defined by cursor location) function to the output window using mostly nasm compatible syntax. You could potentially modify to save ...

View answer
Is it possible/How can I select in the functions window the current subroutine in the IDA View?
Accepted answer
5 votes

Try ctrl-P it will take you to the "Choose function to jump to" window which sounds like what you want.

View answer
Could not find main function in IDA pro?
5 votes

start is the address that IDA pulls from the file header. For PE files this corresponds to (AddressOfEntryPoint + ImageBase). start != main, main is language (C/C++) specific requirement, not all ...

View answer
Why IDA Pro generate define-lack code like this?
Accepted answer
4 votes

As far as I know IDA doesn't dump structure layouts as part of generated assembly listings. It does however know about all the structures that you mention. Go to the structures window, press "Insert" ...

View answer
What exactly do assemblers translate macros into?
3 votes

An assembly language is much more than a set of mnemonics that translate to machine code. The syntax of an assembly language will dictate how you specify operands, the order in which they are ...

View answer
Detecting epilogue/prologue of functions
3 votes

Still not entirely clear what you are hoping to do. IDA has no function that will return to you a function's prologue or epilogue. Here is some code that will iterate over all functions with some ...

View answer
IDA startup signatures format
Accepted answer
3 votes

First, you should begin by reading through pat.txt which is included with the IDA flair utilities. It describes the format of .pat files. Second it would be helpful if you can clarify what you are ...

View answer
How to extract all the rodata data and bss section using IDC script in IDA Pro?
Accepted answer
3 votes

For the .bss section something like the following may work for you: import idaapi import idc print "section .bss" start = idaapi.get_segm_by_name(".bss").startEA end = idaapi.get_segm_by_name(".bss")...

View answer
IDA plugin/script for generating signature statistics (for all sigs) for a target?
2 votes

You may be able to make use of snapshots to make this happen from a plugin. I don't think the database snapshot functions are exposed in IDC or IDAPython. General algorithm on a freshly opened ...

View answer