Quote:
Originally Posted by Chr155Y
Templates are good but they can be used only when you already know that data's structure. I think the OP asked for a tool to analyze a data file and figure out the data structure.
|
Don't be lazy and create one
There are no tool that do it automatically. It's combination of hexeditor + reverse analyse of target program + tests. You don't need to know all details about structure, you can create some dummy fields for unknown data that you can identify later. As say binarylaw: there are file paths, sizes and record size that are known... Hexeditor can highlight these places and you can focus only on "not processed" data. This is common approach for unknown structures.
Some tips for creating structures in IDA,
Quickly creating structures:
Code:
https://www.hex-rays.com/blog/igor-tip-of-the-week-11-quickly-creating-structures/
Creating structures with known size:
Code:
https://www.hex-rays.com/blog/igor-tip-of-the-week-12-creating-structures-with-known-size/