行业解决方案查看所有行业解决方案
IDA 用于解决软件行业的关键问题。
发布时间:2022-10-15 13: 59: 55
Action name: JumpSuspicious
Suspicious operands are the operands that need your attention because they contain an immediate value that could be a number or an offset. IDA does not know about it, so it marks these instructions as 'suspicious'. You can change the suspiciousness of the operands using set lower limit of suspicious operands and set upper limit of suspicious operands commands.
Data arrays are considered to be suspicious if the first element of the data array is within the lower and upper suspicious limits. Values of other elements are not examined.
You can disable the display of the 'suspicious' marks in the Comments Dialog.
NOTE: We strongly recommend that before producing an ASM file you go through all 'suspicious' marks and get rid of them. After this you have a certain level of confidence that the file has been disassembled correctly.
中文翻译:
操作名称:JumpSuspicious
可疑操作数是指包含立即数或偏移量的操作数,需要您的关注。IDA无法确定其真正含义,因此将这些指令标记为“可疑”。您可以使用“设置可疑操作数下限”和“设置可疑操作数上限”命令更改可疑性操作数的可疑程度。
如果数据数组的第一个元素在下限和上限之间,则该数据数组也被视为可疑。其他元素的值不会被检查。
您可以禁用注释对话框中“可疑”标记的显示。
注意:我们强烈建议您在生成ASM文件之前检查所有“可疑”标记并将其删除。这样可以确保文件已被正确反汇编。
展开阅读全文
︾
读者也喜欢这些内容:
ida如何修改指令返回立即数 ida具备哪些指令修复功能
IDA是一款功能强大的反汇编工具,通过IDA,可以深入理解程序的底层指令进行各种操作,本文将为您介绍“ida如何修改指令返回立即数 ida具备哪些指令修复功能”的相关话题,帮助用户更好地掌握IDA的功能。...
阅读全文 >
IDA Pro 键盘快捷键(Shortcut keys)
...
阅读全文 >
IDA pro在文件中搜索子字符串(Search for substring in the file)
...
阅读全文 >
IDA Pro PE .idata 部分有附加数据(PE .idata section has additional data)
...
阅读全文 >