当前位置: 首页 > news >正文

IDA Pro使用

当我们的光标在某个函数处时,按回车键就可以跳到这个函数所在的位置:

按回车,跳到这里:

再按回车,跳到导入表:

我们再连续按ESC键就可以返回到刚才进入的地方:

使用快捷键N可以进行重命名:

在数字上按下H键或者右键进行选择,可以将数字转化为十进制:

在按一下相同的键就变回来了。按下B键转换为二进制也是同理。

按下空格键可以使IDA在图形视图和文本视图之间切换:

 

  • 常用默认快捷键

"JumpAsk" = 'g'
"JumpName" = "Ctrl-L"
"JumpSegment" = "Ctrl-S"
"JumpSegmentRegister" = "Ctrl-G"
"JumpQ" = "Ctrl-Q"
"JumpPosition" = "Ctrl-M"
"JumpXref" = "Ctrl-X"
"JumpXrefFrom" = "Ctrl-J"
"JumpOpXref" = "X"
"JumpFunction" = "Ctrl-P"
"JumpEntryPoint" = "Ctrl-E"
"JumpError" = "Ctrl-F"

"JumpEnter" = "Enter" // jump to address under cursor
"JumpEnterNew" = "Alt-Enter" // jump to address under cursor
// in a new window
"Return" = "Esc"
"UndoReturn" = "Ctrl-Enter" // undo the last Esc

"MarkPosition" = "Alt-M"

"JumpSuspicious" = "Ctrl-V"
"JumpCode" = "Alt-C"
"JumpData" = "Ctrl-D"
"JumpUnknown" = "Ctrl-U"
"JumpExplored" = "Ctrl-A"
"AskNextImmediate" = "Alt-I"
"JumpImmediate" = "Ctrl-I"
"AskNextText" = "Alt-T"
"JumpText" = "Ctrl-T"
"AskBinaryText" = "Alt-B"
"JumpBinaryText" = "Ctrl-B"

"MakeAlignment" = 'L'
"ManualInstruction" = "Alt-F2"

"MakeCode" = 'C'
"MakeData" = 'D'
"MakeAscii" = 'A'
"MakeArray" = "Numpad*"
"MakeUnknown" = 'U'

"MakeName" = 'N'
"ManualOperand" = "Alt-F1"

"MakeFunction" = 'P'
"EditFunction" = "Alt-P"
"FunctionEnd" = 'E'
"OpenStackVariables" = "Ctrl-K" // open stack variables window
"ChangeStackPointer" = "Alt-K" // change value of SP
"RenameRegister" = 'V'
"SetType" = 'Y'

"MakeComment" = ':'
"MakeRptCmt" = ';'

"OpNumber" = '#'
"OpHex" = 'Q'
"OpDecimal" = 'H'
"OpBinary" = 'B'
"OpChar" = 'R'
"OpSegment" = 'S'
"OpOffset" = 'O'
"OpOffsetCs" = "Ctrl-O"
"OpAnyOffset" = "Alt-R"
"OpUserOffset" = "Ctrl-R"
"OpStructOffset" = 'T'
"OpStackVariable" = 'K'
"OpEnum" = 'M'

"EditSegment" = "Alt-S"

"SetSegmentRegister" = "Alt-G"

"ShowRegisters" = "Ctrl-Space"


"OpenFunctions" = "Shift-F3" // open functions window
"OpenNames" = "Shift-F4"
"OpenSignatures" = "Shift-F5" // open signatures window
"OpenSegments" = "Shift-F7"
"OpenSegmentRegisters" = "Shift-F8"
"OpenStructures" = "Shift-F9" // open structures window
"OpenEnums" = "Shift-F10" // open enums window
"OpenTypeLibraries" = "Shift-F11"
"GraphFunc" = "F12" // display function flow-chart
"CallFlow" = "Ctrl-F12" // display function call graph
"OpenStrings" = "Shift-F12"
"OpenLocalTypes" = "Shift-F1"

"SetAsciiStyle" = "Alt-A" // set ascii strings style

"ShowFlags" = 'F'
"Hide" = "Numpad-"
"Unhide" = "Numpad+"

"ExternalHelp" = "Ctrl-F1"

"WindowsListNext" = "Ctrl-Tab"
"WindowsListPrev" = "Ctrl-Shift-Tab"

"NextWindow" = "F6"
"PrevWindow" = "Shift-F6"
"CloseWindow" = "Alt-F3"

转载于:https://www.cnblogs.com/predator-wang/p/5695662.html

相关文章:

  • C#程序员应该养成的程序性能优化写法
  • 在python 中is和= = 的区别
  • 用U盘安装Ubuntu系统
  • Mac - 印象笔记开发者
  • 关于bootstrap列偏移的两种方式
  • Tortoise SVN安装后右键没有菜单的解决方法
  • 软件测试忠告
  • 桌面远程链接
  • django中@property装饰器的运用
  • Neutron 不健全的HA ROUTER
  • nwjs
  • (Forward) Music Player: From UI Proposal to Code
  • 【leetcode】经典算法题-Counting Bits
  • SQL--常用命令
  • JDK1.7新特性(1):Switch和数字
  • “Material Design”设计规范在 ComponentOne For WinForm 的全新尝试!
  • 【css3】浏览器内核及其兼容性
  • Android Studio:GIT提交项目到远程仓库
  • HTML中设置input等文本框为不可操作
  • leetcode-27. Remove Element
  • PermissionScope Swift4 兼容问题
  • thinkphp5.1 easywechat4 微信第三方开放平台
  • Three.js 再探 - 写一个跳一跳极简版游戏
  • 测试如何在敏捷团队中工作?
  • 飞驰在Mesos的涡轮引擎上
  • 分布式熔断降级平台aegis
  • 精彩代码 vue.js
  • 我有几个粽子,和一个故事
  • 学习ES6 变量的解构赋值
  • 《天龙八部3D》Unity技术方案揭秘
  • 1.Ext JS 建立web开发工程
  • mysql 慢查询分析工具:pt-query-digest 在mac 上的安装使用 ...
  • 策略 : 一文教你成为人工智能(AI)领域专家
  • ​决定德拉瓦州地区版图的关键历史事件
  • #pragma data_seg 共享数据区(转)
  • #pragma预处理命令
  • #每日一题合集#牛客JZ23-JZ33
  • $NOIp2018$劝退记
  • (51单片机)第五章-A/D和D/A工作原理-A/D
  • (笔试题)合法字符串
  • (超详细)语音信号处理之特征提取
  • (二)linux使用docker容器运行mysql
  • (附源码)基于ssm的模具配件账单管理系统 毕业设计 081848
  • (接口自动化)Python3操作MySQL数据库
  • (六)什么是Vite——热更新时vite、webpack做了什么
  • (强烈推荐)移动端音视频从零到上手(下)
  • (四)Controller接口控制器详解(三)
  • (一一四)第九章编程练习
  • (转)ORM
  • *(长期更新)软考网络工程师学习笔记——Section 22 无线局域网
  • .bat批处理(十):从路径字符串中截取盘符、文件名、后缀名等信息
  • .net core 控制台应用程序读取配置文件app.config
  • .NET Core实战项目之CMS 第一章 入门篇-开篇及总体规划
  • .NET 的静态构造函数是否线程安全?答案是肯定的!
  • .NET 动态调用WebService + WSE + UsernameToken