(转)IDA 中文字符串

来源：互联网发布：jquery.min.js没有找到编辑：程序博客网时间：2024/06/05 05:35

标题：Ida pro 里的中文字串(菜鸟进来) (2千字)
作者：nULL
时间：2003-4-1 11:22:03
链接：http://bbs.pediy.com

Ida Pro 的默认设置里对中文字串的支持比较差,对于首字节大于'EO'的都显示成?了.其实...
打开IDA PRO 目录下的IDA.CFG
看到如下:
.........................cut..............................

// the following characters are allowed in ASCII strings, i.e.
// in order to find end of a string IDA looks for a character
// which doesn't belong to this array:
// (cp866 version)
AsciiStringChars =
"/r/n/a/v/b/t/x1B"
" !/"#$%&'()*+,-./0123456789:;<=>?"
"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[//]^_"
"`abcdefghijklmnopqrstuvwxyz{|}~"
"€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
"牎ⅲぅΗī氨渤吹斗腹夯冀究"
"懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
"噌忏溴骁栝觌祉铒";

// (full version)
//AsciiStringChars =
// "/r/n/a/v/b/t/x1B"
// " !/"#$%&'()*+,-./0123456789:;<=>?"
// "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[//]^_"
// "`abcdefghijklmnopqrstuvwxyz{|}~"
// "€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
// "牎ⅲぅΗī氨渤吹斗腹夯冀究"
// "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
// "噌忏溴骁栝觌祉铒瘃蝮趱鲼?";

// the following characters are allowed in user-defined names:

.........................cut..............................

把// (cp866 version) 到// (full version)之间的行用 '//'注释掉
把// (full version) // the following characters are allowed ..之间的行前面的 '//'去掉,保存,重新运行IdaPro,呵呵,汉字真好...

有兴趣的朋友可以再研究一下这个 ;-)
XlatAsciiName =
/*00..0F*/ "/x00/x01/x02/x03/x04/x05/x06/x07/x08/x09/x0A/x0B/x0C/x0D/x0E/x0F"
/*10..1F*/ "/x10/x11/x12/x13/x14/x15/x16/x17/x18/x19/x1A/x1B/x1C/x1D/x1E/x1F"
/*20..3F*/ " !/"# %&'()*+,-_/"
"0123456789:;<=>?"
/*40..5F*/ "@ABCDEFGHIJKLMNO"
"PQRSTUVWXYZ[//]^_"
/*60..7F*/ "`abcdefghijklmno"
"pqrstuvwxyz{|}~"
/*80..9F*/ "ABVGDEJZIIKLMNOP"
"RSTUFXCCSS I AUQ"
/*A0..BF*/ "abvgdejziiklmnop"
"氨渤吹斗腹夯冀究"
/*C0..DF*/ "懒旅呐魄壬仕掏蜗"
"醒矣哉肿刭谯茌捱"
/*E0..FF*/ "rstufxccss i auq"
"瘃蝮趱鲼?";

_nULL_

在IDA5.5版本验证是有这个配置文件，与相应字段的。