A few days ago I was working on the x86 IDA module. The goal was to have it recognize jump tables for 64-bit processors. This is routine: we have to add new instruction idioms to the analysis engine from time to time to keep up with new compilers. I was typing in the patterns and hoping that the tests would […]
If you used IDA Pro for a while, you might have noted that it contents itself with simple things. It neatly displays the disassembly listing. It allows you to improve the listing by adding names and comments. You can manually define your symbols, types, functions. IDA itself can add some types and discover some program properties, but overall the performed […]
In May a contest was open on Datarescue’s forum: http://www.datarescue.com/ubb/ultimatebb.php?/topic/4/375.html There were some nice tries but nobody guessed it right. It seems Datarescue will have to repeat the contest with another question 🙂 If you are curious to learn the correct answer, please read on.
There is no such thing as a bug free software. Today I stumbled on this: http://googleresearch.blogspot.com/2006/06/extra-extra-read-all-about-it-nearly.html This is an unfortunate and sad truth about programming: regardless of our efforts, software will have bugs; it will crash, it will burn, it will fail. At the same time there is a hope: http://alloy.mit.edu/ We desperately need code verification tools like […]
After spending several days with a naive approach to linear algebra I can tell you: it doesn’t work. Will use a third party implementation because my implementation is way too slow. My very short and elegant implementation (only 500 lines) works well for smal problems but miseralby fails with anything of substantial size. The failure […]
Apparently she was someone very pious and spiritual 🙂 http://nominis.cef.fr/contenus/saints_966.html Today is her day. IDA Pro started as a simple abbreviation but we quickly got used to the image of this nice lady (in fact the person depicted on the image is just a certain medieval lady, not a saint; not named Ida neither…).
For a typical MS Windows executable IDA does quite good job of recognizing code and creating functions and usually the result is eye-pleasing and easy to decipher. The analysis is quite good but not perfect – there are cases when it takes data for code or wrongly determines the function boundaries. The good news are that […]
The new IDA Pro introduces the graph mode. The disassembly of the current function is displayed as a graph: each basic block is represented as a node and cross references are represented as edges. It is easy to zoom, move, and modify the graph using the mouse, I’m sure you will just use the new […]
If you are one of unfortunate users still forced to use the Internet Explorer, consider installing this temporary patch from Determina: http://www.determina.com/security_center/security_advisories/securityadvisory_march272006_1.asp Just do not forget to reboot your computer after applying the patch, the installer seems not to insist on it. If you can not reboot the computer, then at least close all IE6 windows to […]