Environment variable editor

Normally, to change environment variables in a running process, one has to terminate the process, edit the environment variables and re-run the process. In this blog entry we are going to write an IDAPython script that allows us to add, edit or delete environment variables in […]

IDA 7.4: Qt 5.6.3 configure options & patch

A handful of our users have already requested information regarding the Qt 5.6.3 build, that is shipped with IDA 7.4. Configure options Here are the options that were used to build the libraries on: Windows: …\5.6.3\configure.bat “-nomake” “tests” “-qtnamespace” “QT” “-confirm-license” “-accessibility” “-opensource” “-force-debug-info” “-platform” “win32-msvc2015” “-opengl” “desktop” “-prefix” “C:/Qt/5.6.3-x64” Note that you will have to build with Visual […]

IDA 7.2 – The Mac Rundown

We posted an addendum to the release notes for IDA 7.2: The Mac Rundown. It dives much deeper into the Mac-specific features introduced in 7.2, and should be great reference material for users interested in reversing the latest Apple binaries. It’s packed full of hints, tricks, and workarounds. We hope you will find it quite useful! […]

IDA 7.2: Qt 5.6.3 configure options & patch

A handful of our users have already requested information regarding the Qt 5.6.3 build, that is shipped with IDA 7.2. Configure options Here are the options that were used to build the libraries on: Windows: …\5.6.3\configure.bat “-nomake” “tests” “-qtnamespace” “QT” “-confirm-license” “-accessibility” “-opensource” “-force-debug-info” “-platform” “win32-msvc2015” “-opengl” “desktop” “-prefix” “C:/Qt/5.6.3-x64” Note that you will have […]

Deobfuscating xor'ed strings

A few days ago a customer sent us a sample file. The code he sent us was using a very simple technique to obfuscate string constants by building them on the fly and using ‘xor’ to hide the string contents from static disassembly: The decompiler recovered most of the xor’ed values but some of them […]

IDA on non-OS X/Retina Hi-DPI displays

The problem Some users running IDA on Windows & Linux X11 platforms with Hi-DPI displays, have reported that IDA looks rather odd: the navigator bar is too narrow, the text under it gets truncated, and there is overall feeling of packing & clumsiness: Windows: Linux X11: Looking closely, one can notice the following issues (probably […]