首页
社区
课程
招聘
[转帖]Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA
发表于: 2021-1-10 11:38 1797

[转帖]Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA

2021-1-10 11:38
1797

Igor’s tip of the week #21: Calculator and expression evaluation feature in IDA

f5dK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2Z5k6i4S2Q4x3X3c8J5j5i4W2K6i4K6u0W2j5$3!0E0i4K6u0r3j5X3I4G2k6#2)9J5c8X3W2Y4L8%4u0K6i4K6u0V1N6r3W2H3i4K6u0V1L8$3k6Q4x3X3c8@1K9r3g2Q4x3X3c8%4k6h3g2C8i4K6u0V1x3U0q4Q4x3X3c8U0j5h3I4U0N6h3I4S2N6r3!0J5i4K6u0V1j5h3&6V1i4K6u0V1k6i4S2H3M7X3g2K6M7$3W2G2L8W2)9J5k6r3g2$3j5h3I4#2j5i4c8A6L8$3&6Q4x3X3c8X3k6h3q4@1N6i4u0W2i4K6u0V1K9h3&6Q4x3X3c8A6k6r3q4Q4x3V1j5`.

When reverse-engineering, sometimes you need to perform some simple calculations. While you can always use an external calculator program, IDA has a built-in one. You can invoke it by pressing  or via View > Calculator.


The calculator shows the result in hex, decimal, octal, binary and as a character constant. This information is also duplicated in the Output window in case you need to copy it to somewhere else.

In addition to plain numbers, you can use names from the database, as well as register values during debugging similarly to the “Jump to address” dialog from the previous tip.

By the way, the number, address, or identifier under cursor is picked up automatically when you press ? so there’s no need to copy or type it manually.

In fact, the expression evaluation feature is provided by the IDC language interpreter built-in into IDA. You can use expressions in almost any place in IDA that accepts numbers: Jump to address, Make array, User-defined offset and so on.


You can also use any of the available IDC functions. For example, expressions like the following are possible during debugging:



[培训]科锐逆向工程师培训第53期2025年7月8日开班!

最后于 2021-1-10 11:45 被linhanshi编辑 ,原因:
收藏
免费 2
支持
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回