📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  minesweeper in IDA

Topic created on: February 18, 2010 11:57 CST by maybnxtseasn .

i'm currently doing a little practice with assembly with minesweeper opened up in IDA pro... im just curious as to why when u open programs up in IDA why does it randomly split up a part of a function with

---------------------------------


for example this is a code in a function in minesweeper...why is it inside of a wall of minuses? what does this indicate?


.text:01001E59 ; ---------------------------------------------------------------------------
.text:01001E59
.text:01001E59 loc_1001E59: ; CODE XREF: sub_1001BC9+22Dj
.text:01001E59 mov eax, [ebp+wParam]
.text:01001E5C add eax, 0FFFFFDF7h
.text:01001E61 mov word ptr dword_10056A0, ax
.text:01001E67 movzx eax, ax
.text:01001E6A lea eax, [eax+eax*2]
.text:01001E6D shl eax, 2
.text:01001E70 mov ecx, dword_1005010[eax]
.text:01001E76 mov dword_10056A4, ecx
.text:01001E7C mov ecx, dword_1005014[eax]
.text:01001E82 mov eax, dword_1005018[eax]
.text:01001E88 mov uValue, ecx
.text:01001E8E mov dword_10056AC, eax
.text:01001E93 call sub_100367A
.text:01001E98 jmp loc_1001F4A
.text:01001E9D ; ---------------------------------------------------------------------------
.text:01001E9D

  RabidCicada     February 18, 2010 13:34.42 CST
I don't know which version of IDA Pro you have, but, at a quick glance it looks like IDA is just isolating basic blocks with the minuses.

It doesn't do that by default on my version of IDA but maybe your version does or your specific configuration is set up to do that.

  h4z4rd     February 19, 2010 03:32.27 CST
You can turn it off in Options->General->Borders betweeen data/code.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit