(转)IDA 中文字符串

标 题：
Ida pro 里的中文字串(菜鸟进来) (2千字)

作 者：
nULL

时 间：
2003-4-1 11:22:03

链 接： http://bbs.pediy.com
Ida Pro 的默认设置里对中文字串的支持比较差,对于首字节大于'EO'的都显示成?了.其实...

打开IDA PRO 目录下的IDA.CFG

看到如下:

.........................cut..............................

// the following characters are allowed in ASCII strings, i.e.

// in
order to find end of a string IDA looks for a character

// which doesn't
belong to this array:

// (cp866 version)

AsciiStringChars =

"/r/n/a/v/b/t/x1B"

" !/"#$%&'()*+,-./0123456789:;<=>?"

"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[//]^_"

"`abcdefghijklmnopqrstuvwxyz{|}~"

"€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?

"牎ⅲぅΗī氨渤吹斗腹夯冀究"

"懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"

"噌忏溴骁栝觌祉铒";

// (full version)

//AsciiStringChars =

// "/r/n/a/v/b/t/x1B"

// " !/"#$%&'()*+,-./0123456789:;<=>?"

// "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[//]^_"

//
"`abcdefghijklmnopqrstuvwxyz{|}~"

// "€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?

// "牎ⅲぅΗī氨渤吹斗腹夯冀究"

// "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"

// "噌忏溴骁栝觌祉铒瘃蝮趱鲼?";

// the following characters
are allowed in user-defined names:

.........................cut..............................

把// (cp866 version) 到// (full version)之间的行用 '//'注释掉

把// (full version)
// the following characters are allowed ..之间的行前面的 '//'去掉,保存,重新运行IdaPro,呵呵,汉字真好...

有兴趣的朋友可以再研究一下这个 ;-)

XlatAsciiName =

/*00..0F*/ "/x00/x01/x02/x03/x04/x05/x06/x07/x08/x09/x0A/x0B/x0C/x0D/x0E/x0F"

/*10..1F*/ "/x10/x11/x12/x13/x14/x15/x16/x17/x18/x19/x1A/x1B/x1C/x1D/x1E/x1F"

/*20..3F*/ " !/"# %&'()*+,-_/"

"0123456789:;<=>?"

/*40..5F*/ "@ABCDEFGHIJKLMNO"

"PQRSTUVWXYZ[//]^_"

/*60..7F*/ "`abcdefghijklmno"

"pqrstuvwxyz{|}~"

/*80..9F*/ "ABVGDEJZIIKLMNOP"

"RSTUFXCCSS I AUQ"

/*A0..BF*/ "abvgdejziiklmnop"

"氨渤吹斗腹夯冀究"

/*C0..DF*/ "懒旅呐魄壬仕掏蜗"

"醒矣哉肿刭谯茌捱"

/*E0..FF*/ "rstufxccss
i auq"

"瘃蝮趱鲼?";

_nULL_

在IDA5.5版本验证是有这个配置文件，与相应字段 的。