View Single Post
Old 07-08-2021, 00:28
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
Join Date: Jan 2002
Location: Here
Posts: 378
Rept. Given: 9
Rept. Rcvd 13 Times in 11 Posts
Thanks Given: 19
Thanks Rcvd at 96 Times in 46 Posts
WhoCares Reputation: 13
thank u for the info.

This python script uses "idaapi.create_strlit(addr, len, get_inf_attr(INF_STRTYPE))" to create string literals.

get_inf_attr(INF_STRTYPE) returns the current string literal type.
But RUST string literal doesn't match any of the known string literal types of IDA.

The string length is hard-coded in a MOV instruction, usually moved to a register like ESI.

Originally Posted by TQN View Post
You can try with this Rust reversing helper
AKA Solomon/blowfish.
Reply With Quote
The Following 2 Users Say Thank You to WhoCares For This Useful Post:
sh3dow (08-24-2021), tonyweb (07-08-2021)