-
Hi People, For context, I was doing reverse on a Delphi program because I wanted to try it by using a Binary Ninja. However, I encountered an issue where Binary Ninja was recognizing bytes of double dword as a function, as depicted in the image below: Whereas, when I attempted the same analysis using IDA, it successfully recognized the types, as shown in the following screenshot: I tried to undefine the function and manually change it to double dword. However, it takes time, as it requires modification per 4 bytes. Is there a more efficient way to achieve the same result as IDA in Binary Ninja Free version? sample is at Malware Bazaar and thanks in advance |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
Unfortunately we don't have great support for delphi. One option would be to reduce the number of bad functions is to disable linearsweep when you "Open with options" To create a bunch of dwords you can create a selection and hit |
Beta Was this translation helpful? Give feedback.
Unfortunately we don't have great support for delphi. One option would be to reduce the number of bad functions is to disable linearsweep when you "Open with options" To create a bunch of dwords you can create a selection and hit
4