Background
The history of Hex-Rays is closely connected to that of our flagship product, IDA Pro.
In the early 1990's, DOS was the most popular OS for PCs which were majorly 8086 with occasional 80286 (80386 was still very expensive). Typical PC had at most 1MB of RAM leaving little space for intensive tasks. However, software development industry was growing quickly and there was a need for debugging and diagnostic tools. Aside from debuggers, disassemblers were mostly batch based (non-interactive). The most popular (and expensive) one was Sourcer by V Communications. It had limited interactivity in that it accepted a "definition file" with a list of starting disassembly points, possible function names and segmentation info. After each change to the definition file the disassembly of the whole file had to be redone from scratch which could take a long time on the machines available at the time. Most of the runtime data was kept in memory (at most 640KB in DOS) so it could fail on big files.
There were some debuggers which could be used for disassembly but they did not really offer RE features such as custom names or comments so deep RE was often done in a text editor or by marking up printouts.
IDA (Interactive Disassembler) offered a new paradigm. It could disassemble a file piece by piece, loading only the fragment which the user was looking at, and did not need to load the whole file into memory. Renaming and commenting was done "just in time" instead of redoing the whole disassembly on every change. The database saved all changes so the work could be performed incrementally over time. However, it took time for this approach to be appreciated by the users.
The complete timeline
(one of the core source files mentions being created on 25-Oct-1990)
Archive
ida01.zipLength Date Time Name -------- ---- ---- ---- 24708 18-02-91 18:55 COMPRESS.EXE 11451 21-05-91 22:21 COMTYPES.DOC 76048 21-05-91 22:24 IDA.EXE 57344 21-05-91 22:23 IDA.INT 3581 06-05-91 17:36 IDAE.DOC 3795 06-05-91 16:22 IDAR.DOC 5976 27-05-91 18:17 README 25080 18-02-91 19:07 REPAIR.EXE -------- ------- 207983 8 files
May 22: Windows 3.0 released by Microsoft September 17: Linux release announcement by Linus Torvalds
- Turbo Vision instead of custom UI
- IDC scripting language added
- start of shareware distribution (mainly via FidoNet and BBS, some FTPs)
- support for additional processors (8080, 8085, Z80)
- support for the NE file format (16-bit Windows and later OS/2)
- Plugins support added in the SDK
- Windows GUI version (text mode listing only). First appearance of now-classic IDA icon.
- Type System (standard function prototypes)
- PIT (parameter identification and tracking)
June: Desquirr decompiler plug-in released http://desquirr.sourceforge.net/
January: user-contributed Windows PE debugger plugin (Idbg)
IDA 4.5 (12/02/03)- Integrated debugger
- 64-bit address space support; AMD64 disassembly
- support for fragmented (chunked) functions
- Linux console version
- remote cross-patform debugging
- 64-bit remote debugger
Ilfak starts posting on hexblog.com
December 14: WMF vulnerability zero day attack
December 31: Ilfak's unofficial vulnerability hotfix becomes very popular
- Intel Mac OS X debugger
- Simplex based stack pointer analysis /blog/simplex-method-in-ida-pro
Hex-Rays Decompiler 1.0 (17/09/07) released
Hex-Rays Decompiler SDK (25/10/07) released
January 1: Hex-Rays SA takes over development of IDA
IDA 5.3- Multithreaded debugging
- iPhone, Symbian debuggers
- development moves to Google Code
- Bochs, GDB, WinDbg debuggers
- IDAPython included with IDA
- dockable windows
- arrival of the now classsic IDA layout with the functions list to the left of disassembly
- IDAPython support for Linux and Mac
- 64-bit Linux and Mac debuggers
- ARM Linux remote debugger
- Appcall feature
- Scripted plugins and processor modules
- ARM decompiler
- cross-platform Qt based GUI version for Windows, Linux & Mac
- source-level debugging
- ARM64 disassembly
- x64 decompiler
- Python bindings for the decompiler SDK
- ARM64 decompiler
- ARM64 Android debugger
- iPhone debugger using official Apple debugserver
- PPC decompiler
- IDA is a native 64-bit executable for all platforms
- decompiler microcode API opened
- Lumina function database
- PPC64 decompiler
- UNDO feature
- Python 3 support
- folder views
- MIPS decompiler
- native ARM64 macOS build
- MIPS64 decompiler
- Multi-user collaboration (IDA Teams)
- Private Lumina
- IDA64 .idb support