Name mangling (also called name decoration) is a technique used by compilers to implement some of the features required by the language. For example, in C++ it is used to distinguish functions with the same name but different arguments (function overloading), as well as to support namespaces, templates, and other purposes. Mangled names often end up in the […]
Read MoreA rather nasty issue evaded our testing and found its way into IDA 7.6: using the PyQt5 modules that are shipped with IDA, QTreeView (or QTreeWidget) instances will always fail to display contents. E.g., the following script from PyQt5 import QtWidgets tree = QtWidgets.QTreeWidget() item = QtWidgets.QTreeWidgetItem() item.setText(0, “Test col#0”) tree.addTopLevelItem(item) tree.show() used to render like so: but now looks like this: The fix In order to solve this, […]
Read MoreIn IDA’s disassembly, you may have often observed names that may look strange and cryptic on first sight: sub_73906D75, loc_40721B, off_40A27C and more. In IDA’s terminology, they’re called dummy names. They are used when a name is required by the assembly syntax but there is nothing suitable available, for example the input file has no […]
Read MoreThe user directory is a location where IDA stores some of the global settings and which can be used for some additional customization. Default location On Windows: %APPDATA%/Hex-Rays/IDA Pro On Linux and Mac: $HOME/.idapro For brevity, we’ll refer to this path as $IDAUSRin the following text. Contents/settings The directory is used to store the processor module caches (proccache.lst and proccache64.lst) as well […]
Read MoreA handful of our users have already requested information regarding the Qt 5.6.3 build, that is shipped with IDA 7.6. Configure options Here are the options that were used to build the libraries on: Windows: …\5.6.3\configure.bat “-nomake” “tests” “-qtnamespace” “QT” “-confirm-license” “-accessibility” “-opensource” “-force-debug-info” “-platform” “win32-msvc2015” “-opengl” “desktop” “-prefix” “C:/Qt/5.6.3-x64” Note that you will have to build with Visual […]
Read MoreThe 2021 IDA training course will take place online from 10–14 and 17-19 May 2021, CEST time. Due to the ongoing COVID-19 situation, the world-class IDA Training course is taking place online for the second time from 10-14 and 17-19 May 2021 (CEST time). The course is devised to help professional reverse engineers master IDA […]
Read MoreScripting allows you to automate tasks in IDA which can be repetitive or take a long time to do manually. We previously covered how to run them in batch (headless) mode, but how can they be used interactively? Script snippets File > Script Command… (Shift+F2) Although this dialog is mainly intended for quick prototyping and database-specific […]
Read MoreToday, Hex-Rays team is thrilled to announce the release of IDA version 7.6! Our top-notch binary analysis tool IDA Pro’s latest version delivers new features and various enhancements. With significantly-improved performance, version 7.6 is expected to certainly accelerate its users’ reverse-engineering experience. Here are the highlight features and changes introduced in IDA 7.6: Apple Silicon’s full support: The […]
Read MoreYou may have come across the menu items View > Hide, Unhide but possibly never used them. These commands allow you to hide, or collapse and unhide/uncollapse parts of IDA’s output. They can be used in the following situations: Hiding instructions or data items To make your database more compact and reduce clutter, you can opt to hide […]
Read MoreIDA has three shortcuts as an alternative to some menus which could be cumbersome to navigate. Quick view Probably the most commonly used, it is triggered by the shortcut Ctrl+1 and shows the items under the View > Open subviews menu. It can be especially useful for opening views which have no dedicated shortcut such as Notepad (although […]
Read More