• 标 题:Ida pro 里的中文字串(菜鸟进来) (2千字)
  • 作 者:nULL
  • 时 间:2003-4-1 11:22:03
  • 链 接:http://bbs.pediy.com

Ida Pro 的默认设置里对中文字串的支持比较差,对于首字节大于'EO'的都显示成?了.其实...
打开IDA PRO 目录下的IDA.CFG
看到如下:
.........................cut..............................

// the following characters are allowed in ASCII strings, i.e.
// in order to find end of a string IDA looks for a character
// which doesn't belong to this array:
// (cp866 version)
AsciiStringChars =
        "\r\n\a\v\b\t\x1B"
        " !\"#$%&'()*+,-./0123456789:;<=>?"
        "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
        "`abcdefghijklmnopqrstuvwxyz{|}~"
        "亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
        "牎ⅲぅΗī氨渤吹斗腹夯冀究"
        "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
        "噌忏溴骁栝觌祉铒";

// (full version)
//AsciiStringChars =
//      "\r\n\a\v\b\t\x1B"
//      " !\"#$%&'()*+,-./0123456789:;<=>?"
//    "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
//      "`abcdefghijklmnopqrstuvwxyz{|}~"
//      "亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
//      "牎ⅲぅΗī氨渤吹斗腹夯冀究"
//      "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
//      "噌忏溴骁栝觌祉铒瘃蝮趱鲼?";

// the following characters are allowed in user-defined names:


.........................cut..............................

把// (cp866 version) 到// (full version)之间的行用 '//'注释掉
把// (full version)  // the following characters are allowed ..之间的行前面的 '//'去掉,保存,重新运行IdaPro,呵呵,汉字真好...

有兴趣的朋友可以再研究一下这个 ;-)
XlatAsciiName =
/*00..0F*/ "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"
/*10..1F*/ "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F"
/*20..3F*/ " !\"# %&'()*+,-_/"
          "0123456789:;<=>?"
/*40..5F*/ "@ABCDEFGHIJKLMNO"
          "PQRSTUVWXYZ[\\]^_"
/*60..7F*/ "`abcdefghijklmno"
          "pqrstuvwxyz{|}~"
/*80..9F*/ "ABVGDEJZIIKLMNOP"
          "RSTUFXCCSS I AUQ"
/*A0..BF*/ "abvgdejziiklmnop"
          "氨渤吹斗腹夯冀究"
/*C0..DF*/ "懒旅呐魄壬仕掏蜗"
          "醒矣哉肿刭谯茌捱"
/*E0..FF*/ "rstufxccss i auq"
          "瘃蝮趱鲼?";


                                      _nULL_