Ida Pro 的預設設定裡對中文字串的支援比較差,對於首位元組大於'EO'的都顯示成?了.其實...
開啟IDA PRO 目錄下的IDA.CFG
看到如下:
.........................cut..............................
// the following characters are allowed in ASCII strings, i.e.
// in
order to find end of a string IDA looks for a character
// which doesn't
belong to this array:
// (cp866 version)
AsciiStringChars =
"\r\n\a\v\b\t\x1B"
" !\"#$%&'()*+,-./0123456789:;<=>?"
"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
"`abcdefghijklmnopqrstuvwxyz{|}~"
"?
"、￥ウЖ┆輩炒刀犯購患驕"
"懶旅吶魄壬仕掏蝸醒矣哉腫剄譙茌捱"
"噌懺溴驍栝覿祉鉺";
// (full version)
//AsciiStringChars =
// "\r\n\a\v\b\t\x1B"
// " !\"#$%&'()*+,-./0123456789:;<=>?"
// "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_"
//
"`abcdefghijklmnopqrstuvwxyz{|}~"
// "?
// "、￥ウЖ┆輩炒刀犯購患驕"
// "懶旅吶魄壬仕掏蝸醒矣哉腫剄譙茌捱"
// "噌懺溴驍栝覿祉鉺瘃蝮趲鱝?";
// the following characters
are allowed in user-defined names:
.........................cut..............................
把// (cp866 version) 到// (full version)之間的行用 '//'註釋掉
把// (full version)
// the following characters are allowed ..之間的行前面的 '//'去掉,儲存,重新執行IdaPro,呵呵,漢字真好...
有興趣的朋友可以再研究一下這個 ;-)
XlatAsciiName =
/*00..0F*/ "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"
/*10..1F*/ "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F"
/*20..3F*/ " !\"# %&'()*+,-_/"
"0123456789:;<=>?"
/*40..5F*/ "@ABCDEFGHIJKLMNO"
"PQRSTUVWXYZ[\\]^_"
/*60..7F*/ "`abcdefghijklmno"
"pqrstuvwxyz{|}~"
/*80..9F*/ "ABVGDEJZIIKLMNOP"
"RSTUFXCCSS I AUQ"
/*A0..BF*/ "abvgdejziiklmnop"
"氨渤吹鬥腹夯冀究"
/*C0..DF*/ "懶旅吶魄壬仕掏蝸"
"醒矣哉腫剄譙茌捱"
/*E0..FF*/ "rstufxccss
i auq"
"瘃蝮趲鱝?";
_nULL_