|
Hi People, For context, I was doing reverse on a Delphi program because I wanted to try it by using a Binary Ninja. However, I encountered an issue where Binary Ninja was recognizing bytes of double dword as a function, as depicted in the image below: Whereas, when I attempted the same analysis using IDA, it successfully recognized the types, as shown in the following screenshot: I tried to undefine the function and manually change it to double dword. However, it takes time, as it requires modification per 4 bytes. Is there a more efficient way to achieve the same result as IDA in Binary Ninja Free version? sample is at Malware Bazaar and thanks in advance |
Replies: 1 comment 1 reply
|
Unfortunately we don't have great support for delphi. One option would be to reduce the number of bad functions is to disable linearsweep when you "Open with options" To create a bunch of dwords you can create a selection and hit |


Unfortunately we don't have great support for delphi. One option would be to reduce the number of bad functions is to disable linearsweep when you "Open with options" To create a bunch of dwords you can create a selection and hit
4