![]() ![]() IDA will only do x86, 圆4, ARM and AArch64 (and you pay for all of those separately). Ghidra will decompile code from a dozen different architectures. Semi-automatic struct inference rocks, and it comes with a big type library. Ghidra's type system is nice, and in some ways nicer than IDA's. Many of these require much more work to undo than simply reverting the change you made. Being able to make changes without worrying about your IDB accidentally becoming unusable is huge.Ĭontext: in IDA, certain changes you make can inadvertently wipe out a lot of work - for example, undefining a function (U) can erase all your annotations in a single keystroke defining a return type incorrectly can completely mess up callers, sometimes to the point where they won't even decompile properly making a typo to an array size argument can obliterate the stack and every variable annotation you made on it, etc. Ghidra also appears to have a functioning Undo operation, which IDA seems to still not have.
0 Comments
Leave a Reply. |