I'm following the tutorial here:
http://www.securityfocus.com/infocus/1641 (Well, sorta; its a tad out of date on the Wine front, so I'm having to make some changes) but I'm hitting a problem with openning binaries with idaw. The specific error:
bTree error: file open error.
The help text suggests it is a memory issue- this is patently wrong:
Code:
jc@jcmain:~$ cat /proc/meminfo
MemTotal: 2038596 kB
MemFree: 888260 kB
Buffers: 230820 kB
Cached: 505764 kB
SwapCached: 0 kB
Active: 637988 kB
Inactive: 433184 kB
HighTotal: 1141500 kB
HighFree: 293552 kB
LowTotal: 897096 kB
LowFree: 594708 kB
SwapTotal: 6482216 kB
SwapFree: 6482216 kB
Dirty: 328 kB
Writeback: 0 kB
AnonPages: 334584 kB
Mapped: 78560 kB
Slab: 61924 kB
SReclaimable: 52544 kB
SUnreclaim: 9380 kB
PageTables: 2856 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 7501512 kB
Committed_AS: 715104 kB
VmallocTotal: 114680 kB
VmallocUsed: 9284 kB
VmallocChunk: 105144 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 4096 kB
I suppose my first question is whether or not anyone can suggest a solution, though I must admit I'm not married to this method of reverse engineering windows binaries, so if anyone can link another tutorial or even suggest a different methodology then thats great too.
Cheers.