http://www.pediy.com/kssd/pediy05/pediy50528.htm
Ida Pro 的默认设置里对中文字串的支持比较差,对于首字节大于'E0'的都显示成?了.其实... 打开IDA PRO 目录下的IDA.CFG 看到如下:
// the following characters are allowed in ASCII strings, i.e.
// in order to find end of a string IDA looks for a character
// which doesn't belong to this array:
// (cp866 version)
AsciiStringChars =
"
av x1B"
" !"#$%&'()*+,-./0123456789:;<=>?"
"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_"
"`abcdefghijklmnopqrstuvwxyz{|}~"
"€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
"牎ⅲぅΗī���氨渤吹斗腹夯冀究"
"懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
"噌忏溴骁栝觌祉铒";
// (full version)
//AsciiStringChars =
// "
av x1B"
// " !"#$%&'()*+,-./0123456789:;<=>?"
// "@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_"
// "`abcdefghijklmnopqrstuvwxyz{|}~"
// "€亗儎厗噲墛媽崕彁憭摂晼棙櫄洔潪?
// "牎ⅲぅΗī���氨渤吹斗腹夯冀究"
// "懒旅呐魄壬仕掏蜗醒矣哉肿刭谯茌捱"
// "噌忏溴骁栝觌祉铒瘃蝮趱鲼���?";
// the following characters are allowed in user-defined names:
把 // (cp866 version) 到 // (full version)之间的行用 '//'注释掉
把// (full version) // the following characters are allowed ..之间的行前面的 '//'去掉,保存,重新运行IdaPro,呵呵,汉字真好...
有兴趣的朋友可以再研究一下这个 ;-)
XlatAsciiName =
/*00..0F*/ "x00x01x02x03x04x05x06x07x08x09x0Ax0Bx0Cx0Dx0Ex0F"
/*10..1F*/ "x10x11x12x13x14x15x16x17x18x19x1Ax1Bx1Cx1Dx1Ex1F"
/*20..3F*/ " !"# %&'()*+,-_/"
"0123456789:;<=>?"
/*40..5F*/ "@ABCDEFGHIJKLMNO"
"PQRSTUVWXYZ[\]^_"
/*60..7F*/ "`abcdefghijklmno"
"pqrstuvwxyz{|}~"
/*80..9F*/ "ABVGDEJZIIKLMNOP"
"RSTUFXCCSS I AUQ"
/*A0..BF*/ "abvgdejziiklmnop"
"氨渤吹斗腹夯冀究"
/*C0..DF*/ "懒旅呐魄壬仕掏蜗"
"醒矣哉肿刭谯茌捱"
/*E0..FF*/ "rstufxccss i auq"
"瘃蝮趱鲼���?";