IDA v5.1 introduces the notion of dynamic colors. Plugins can install a callback which dynamically calculates colors and provides them to the user interface. In the previous versions of IDA plugins were forced to change the item color in the database thus overwriting any user-defined colors. The new IDA makes it possible to calculate colors on the fly.
Ever tried to run many instances of IDA simultaneously? I mean, not only one or two, but much more, tens of them at the same time? Not everyone needs it but sometimes a whole directory must be analyzed. Imagine you have created a plugin which finds something interesting in binaries…
Did you know that you can add your own cross-references to the listing? There are even several different methods for that: Open xrefs window and press Ins Write an IDC script Write a plugin Adding xrefs is very useful if IDA missed some of them and the graph looks ugly. Another benefit is replicated comments. See a […]
Writing boot code is useful for many reasons, whether you are: Developing your own operating system Developing disk encryption systems Experimenting and researching Or even writing a bootkit
We all know that call invokes a function and ret returns to the caller. Alas, nothing is certain in the binary world. The ret instruction is quite often used for short jumps within a function. Among many other improvements in IDA v5.1 there will be a special logic to recognize and mark such pseudo-returns. I […]
Ero Carrera in his eye-catching blog talks about multi-chunk function related shortcomings in IDA Pro: This results in that, from the disassembler point of view, one has to allow for those chunks and also for those chunks to be assigned to an arbitrary number of “owning” or parent functions.
I think you have noticed that the site was down for a while. My web hoster again played the same trick: shut down the site with no notice. I’m leaving them. While I was busy with all this stuff, the ZERT group has created a patch for the VML vulnerability. These guys did a really great […]
A few days ago I was working on the x86 IDA module. The goal was to have it recognize jump tables for 64-bit processors. This is routine: we have to add new instruction idioms to the analysis engine from time to time to keep up with new compilers. I was typing in the patterns and hoping that the tests would […]