[ia32rtools.git] / ida / notes.txt


manual adjust:
- (exe only) find constants in .text that are actually pointers
  (adjust as needed):
     [456][0-9A-F][0-9A-F][0-9A-F][0-9A-F][0-9A-F]h
     _[456][0-9A-F][0-9A-F][0-9A-F][0-9A-F][0-9A-F]\+
- get rid of function chunks where possible (they're usually tailcalls)
- search for 'dword_xx+N', make byte/word, also word->byte
     ptr [^\[ ].*\+[0-9A-F]
     offset [^ ]*\+[0-9A-F]
- convert ds:0[eax*4] -> [eax*4+0] (h hotkey)
Commit	Line	Data
4328117e	1
	2	manual adjust:
	3	- (exe only) find constants in .text that are actually pointers
	4	(adjust as needed):
	5	[456][0-9A-F][0-9A-F][0-9A-F][0-9A-F][0-9A-F]h
	6	_[456][0-9A-F][0-9A-F][0-9A-F][0-9A-F][0-9A-F]\+
	7	- get rid of function chunks where possible (they're usually tailcalls)
	8	- search for 'dword_xx+N', make byte/word, also word->byte
ea43585b	9	ptr [^\[ ].*\+[0-9A-F]
ea43585b	10	offset [^ ]*\+[0-9A-F]
4328117e	11	- convert ds:0[eax4] -> [eax4+0] (h hotkey)