All articles

Interviews, Igor's tips of the week, guides, industry best practices, and more.

WMF Vulnerability Checker

It seems that many users installed the hotfix for the WMF vulnerability on their machines. The fix ...

The longest arithmetic operation

So far this is the absolute record for the binary size of one division/remainder/multiplication ...

Tracing exception handlers

Suppose our goal is to dissect a new program. The ultimate method of analysis is single stepping ...

The unispector

How do you spell “I love you” in Greek?… In IDA Pro you can create unicode strings. They are ...

Reading assembly code

Even unobfuscated code is difficult to understand. Look at this function. Can you tell its purpose? ...

The highlighter

Today I’ll present you a pretty small yet useful plugin. If you tried to trace an obfuscated code ...

How to unpack XCP.DAT?

I updated my EFD utility to handle the packed XCP.DAT file. To extract files from the archive, use: ...

Sony DRM

The last week several LGPL violations were found in Sony’s DRM implementation. Here is a proof of ...