English 中文(简体)
IDA(4.9) Is it possible to change definitions of imported functions?
原标题:

Is it possible to change argument types/names of arguments of imported functions like StretchBlt in IDA 4.9? It s painful and error-prone to manually change from

...
.text:0040A49E                 push    eax             ; HDC
.text:0040A49F                 push    36h             ; int
.text:0040A4A1                 push    48h             ; int
.text:0040A4A3                 push    5Ah             ; int
.text:0040A4A5                 push    0               ; int
.text:0040A4A7                 push    ecx             ; HDC
.text:0040A4A8                 call    edi ; StretchBlt

to

...
.text:0040A49E                 push    eax             ; HDC srcHDC
.text:0040A49F                 push    36h             ; int destHeight
.text:0040A4A1                 push    48h             ; int destWidth
.text:0040A4A3                 push    5Ah             ; int destY
.text:0040A4A5                 push    0               ; int destX
.text:0040A4A7                 push    ecx             ; HDC destHDC
.text:0040A4A8                 call    edi ; StretchBlt

each time

问题回答

Have you tried writing an .IDC script to search for that block of comment, then adjust the previous lines comments.





相关问题
Perl and IDA Pro

Could someone provide a good link to documentation/material/examples for IDA Perl (a plugin to add Perl scripting and automation support to IDA Pro)? I see there is much documentation about Python and ...

Quickbooks SQL dump Code from QODBC

I need to extract Quickbooks SQL structure to make a Diagram about the tables that I need to work with. Could this be possible ? I think QODC could solve my connection issue but I don t know how to ...

Reverse Engineering an Apple Kext - Reconstructing the Class

Greetings! I am currently attempting to extend the functionality of the Magic Mouse. To do this, I am hoping to write a kext that intercepts events from the multitouch driver, AppleMultitouchDriver....

Keeping nhibernate fluent mapping in sync with the database

We are currently using Fluent NHibernate and SQL Server 2008 in our c# development, however, the database schema has become too complex for Fluent to re-create the database when necessary so we are ...

Reverse-engineering of communication protocols

Just curious - what are some automatic or even semi-automatic techniques for reverse-engineering of communication protocols? I am particularly interested in the case when one s sniffing traffic and ...

热门标签