search

jchristman / PyDA

Python binary DisAssembler
http://suntzuii.github.io/PyDA/
Other
26 stars 10 forks source link

Data Section Postprocessing #23

Open direwolf314 opened 10 years ago

direwolf314 commented 10 years ago
  1. For each string, convert the single-byte dictated version into a string declaration. For example, multiple lines of single bytes would be replaced with: string_name db 'string_contents',0 .
  2. Identify jump tables/pointers by taking a sliding window on unidentified bytes and checking if they point to known data. a. Requires knowledge of endianness and word size b. If it points to either code or data - make that point a "Location". See comment on #14 i. Example: dd offset loc_401813