No more manual extraction of tar archives for Linux or OS X.
A new installer will be provided for ease of installation.
Linux installer screenshot:
OS X installer screenshot:
The proximity viewer allows the user to see and browse the relationships between functions, global variables, constants, etc...
It can be used, for example, to visualize the complete callgraph of a program, to see the path between 2 functions or what global variables are referenced from some function.
Now the Bochs debugger plugin supports debugging basic PE+ executables.
API emulation via scripting also works as usual. Click here for more details.
(Screenshot of a PE+ malware being debugged with the Bochs debugger plugin)
With this feature, it will be possible to change and re-assign the shortcuts of built-in IDA actions and the default shortcuts of plugins, external menu entries and IDC scripts.
More about the shortcut editor
This feature will be very handy when it comes to filtering out the content of choosers in order to show or highlight the items that matter.
More about the chooser filters
In this version, it will be possible to take database snapshots and restore them when needed (hierarchical snapshots are supported as well).
Checking for new Hex-Rays products version has been improved. This new addition will check for new versions of IDA Pro or the Hex-Rays Decompilers.
Another nice addition are xrefs to structure members. This features comes in handy when reversing/tracking data structure use in a program for example.
Apple is not standing still and in iOS 5 the default compiler will be LLVM instead of GCC. It produces somewhat different code and we have improved our processor module to handle it. Compare two snippets of the same file. In IDA Pro 6.1: In IDA Pro 6.2: As you can see, we now also parse and analyze Objective-C 2.0 metadata structures produced by the compiler. Using that information, we rename methods, create structures for classes, and apply C-style prototypes to methods for better results in the decompiler. We have also added support for the dyld_shared_cache format used in current iOS versions. kernelcache files are also recognized now and are split into separate KEXTs.
IDAPython has been updated. The most notable additions:
- More form control support (refer to AskUsingForm() documentation in the SDK)
- New processor and UI notification callbacks
- New APIs and samples
- IDC compatible netnode support
- ! and ? pseudo commands to shell execute and retrieve documentation
- Support for extending IDC functions using Python
- Working with patched bytes
- Binding of hotkeys with Python functions (no need to go through IDC anymore)
An IDA Pro with floating license can be installed on many computers but only the purchased number of seats can be used simultaneously. Floating licenses require installation of a license manager to track the license use. This feature is useful for enterprises who want to optimize the license use.