Igor’s Tip of the Week #159: Where’s my code? The case of not-so-constant data
In order to show the user only the most relevant code and hide the unnecessary clutter, the ...
In order to show the user only the most relevant code and hide the unnecessary clutter, the ...
When working with the decompiler, you probably spend most of the time in the pseudocode view, since ...
When you need to change the prototype of a function in the decompiler, the standard way is to use ...
Firmware binaries often use raw binary file format without any metadata so they have to be loaded ...
We’ve covered splitting expressions before, but there may be situations where it can’t be used.
When working with a binary in IDA, most of the time you probably use one of the main views: ...
When using the decompiler, you probably spend most of the time in the Pseudocode view. In case you ...
Occasionally, especially when working with embedded firmware or obfuscated code, you may see an ...
Previously, we’ve run into a function which produces a cryptic error if you try to decompile it: