IDA Pro Technologies & Features Highlights

IDA Pro is in many ways unique. Its interactivity allows you to improve disassemblies in real time. Its multi-processor support is unmatched. Yet, two of our technologies are truly unique, have never been implemented under any form in any real-life disassemblers and, more importantly, are incredible time savers

The BEST analysis - closest to high level language than anything else.

• FLIRT, our Fast Library Identification and Recognition Technology identifies standard function calls for many compilers. See FLIRT in action. Read the FLIRT technological white paper.
• PIT : Parameter Identification and Tracking tracks stack parameters as they are used. PIT is able to backtrack parameter use. Step 1 - Step 2 - Step 3

Extendibility

• IDA Pro is programmable through a built-in C like language.
• IDA offers an open Plugin Architecture. Our PE debugger is nothing more than a plugin! The source code of several plugins is included in the SDK. Other plugins can be found around the net, for example from Ilfak's blog
  • stealth: stealth against anti-debugging tricks.
  • findcrypt: identifies some frequently used block ciphers.
  • highlighter: highlights code that has been single stepped through in a debugging session.
  • unispector: extracts unicode strings from an IDA Pro database.

Other features & Tutorials

• Fully Interactive : you work with the disassembler and forget about tedious multiple passes.
• Multiple Processor : same interface and features for dozens of processors
• 80x86 Windows PE Debugger, Linux Debugger and Remote Debugger for Linux, Windows, 80x86 Mac OS X (new in 5.1) , ARM/Windows CE Remote Debugger.
• Fully customizable work environment.
• High level constructs such as unions, structures, variable sized structures and low level constructs such as bitfields.
• Stack Variables keep track of your local variables, Local Variables.
• Graphing: through a VCG Port. See our Graphing Tutorial
• Remote debugger, from Linux to Windows and Windows to Linux. See our Remote Debugging Tutorial.
• Program Navigator Toolbar
• Fully dynamic Global and Local Labels.
• Interactive Register Renaming makes RISC processors easy.
• Auto-commenting: you can even define and use your own comments base.
• Versatility: loads and disassemble virtually any file. Visit our gallery for a small subset.

Supported Platforms

IDA Pro runs on Windows 32 GUI, Windows 32 Console, Linux Console, OS X Console