![]() |
|
|
|
#1
|
|||
|
|||
|
IDA finds library functions by signature (mask of bytes from function's entrypoint) and yes, it is possible, that IDA can give "false positive". Also, there are many different realizations of standard functions (i.e. 10-ths variants of optimized memcpy/memset/etc.), which can be mixed in output code compiled with different optimization options for example, so you can have different code for the same function in your file.
|
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| IDA script function. | Git | General Discussion | 6 | 09-24-2014 01:58 |
| GMP function | Git | General Discussion | 4 | 06-16-2011 21:33 |
| Adding a function to Export-Table of a PE file | omidgl | General Discussion | 3 | 04-17-2005 09:27 |
| C++ Help (Hooking a function) | Peter[Pan] | General Discussion | 8 | 08-31-2004 20:37 |