21,459
社区成员
发帖
与我相关
我的任务
分享请发表友善的回复…
发表回复
Mystj 2004-04-13
- 打赏
- 举报
IDA只是按照正常的流程，把程序从入口开始到结束反汇编。
如果程序中用了某些特殊的技术，跳到另一个地方，就需要你手动反汇编了。'C'键
如果程序中用了某些特殊的技术，跳到另一个地方，就需要你手动反汇编了。'C'键
property1 2004-04-12
- 打赏
- 举报
Yang man
FengYuanMSFT 2004-04-12
- 打赏
- 举报
When a disassembler starts disassemble a program, it has to determine which one is data and which one is code. It's not perfect science.
W32Dasm and IDA may just use different algorithms in making the decision.
IDA may start from program entry point and exported functions to find all executable code. Everything else will be data. But things like virtual fuction implenmentation code is hard to tell automatically.
So good thing about IDA is that you can change DATA to code yourself, because it's interative.
Another difference is that IDA may not be designed for modern compiler which normally generate code and data in seperate sections.
Feng Yuan [MSFT] (www.fengyuan.com, blog.fengyuan.com/fyuan)
W32Dasm and IDA may just use different algorithms in making the decision.
IDA may start from program entry point and exported functions to find all executable code. Everything else will be data. But things like virtual fuction implenmentation code is hard to tell automatically.
So good thing about IDA is that you can change DATA to code yourself, because it's interative.
Another difference is that IDA may not be designed for modern compiler which normally generate code and data in seperate sections.
Feng Yuan [MSFT] (www.fengyuan.com, blog.fengyuan.com/fyuan)
property1 2004-04-10
- 打赏
- 举报
??
