![]() |
|
#6
|
|||
|
|||
|
@git:
1. I just manually fix it when I enter an interesting function. Copy real end address then ALT+P. 2. Change low/high suspicious limit in options to some invalid address (eg. 0), then mark all unicode strings that haven't been fully detected and press c. Choose "analyze", choose "Yes, convert to code" and it should fix your unicode strings. You can use a regular expression and search for them: "dd offset [^ ]+00" (dd offset loc_490021) "dd offset [^ ]+\+" (dd offset aSomeString_7+18Bh) Could take a couple of minutes to fix all unicode strings depending on the size of your exe. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| IDA Script Function rename for Delphi VCL (x32 - x64) | Coldzer0 | Community Tools | 0 | 05-12-2018 21:51 |
| GMP function | Git | General Discussion | 4 | 06-16-2011 21:33 |
| C++ Help (Hooking a function) | Peter[Pan] | General Discussion | 8 | 08-31-2004 20:37 |