While IDA comes with a rich set of type libraries for Windows API, they don’t cover the whole set of types used in Windows. Our libraries are based on the official Windows SDK/DDK headers, which tend to only include public, stable information which is common to multiple Windows versions. A new Windows build may […]
Read MoreThis is a guest entry written by Can Bölük. His views and opinions are his own and not those of Hex-Rays. Any technical or maintenance issues regarding the code herein should be directed to the author. NtRays: Reversing Windows kernel, simplified Windows kernel has changed a lot in the past few years, with the addition of Hypervisor […]
Read MoreFloating licenses allow additional flexibility for companies with many IDA users: IDA can be installed on as many computers as required, but only a limited number of copies can run simultaneously. This flexibility its downsides: IDA needs to have permanent connection to your organization’s license server which may make things problematic in some situations (e.g. working […]
Read MoreWhile working with decompiled code and retyping variables (or sometimes when they get typed by the decompiler automatically), you might be puzzled by the discrepancies between pseudocode and disassembly. Consider the following example: We see that X22 is accessed with offset 0x10 (16) in the disassembly but 2 in the pseudocode. Is there a bug in the […]
Read MoreThis is a guest entry written by Simon Garrelou and Sylvain Peyrefitte from the Airbus CERT Team. Their views and opinions are their own and not those of Hex-Rays. Any technical or maintenance issues regarding the code herein should be directed to the authors. Power up your debugging with time travel: the ttddbg plugin Time Travel […]
Read MoreSome of the processors supported by IDA support different ISA variants, in particular: ARM processor module supports the classic 32-bit ARM instructions (A32), 16-bit Thumb or mixed 16/32-bit Thumb32 (T32) , as well as 64-bit A64 instructions (A64) PPC processor module supports the standard 32-bit PowerPC instructions and mixed 16/32-bit Variable Length Environment (VLE) MIPS module supports the […]
Read MoreThe #IDATrivia game! – Day 5 All questions are related to IDA. Read them carefully, check our website, take a look at Igor’s tips, and send your guesses to marketing@hex-rays.com.Attention! Submissions made after the deadlines will not be considered. The deadlines will be published with each round of questions. If all your answers […]
Read MoreThe #IDATrivia game! – Day 4 All questions are related to IDA. Read them carefully, check our website, take a look at Igor’s tips, and send your guesses to marketing@hex-rays.com.Attention! Submissions made after the deadlines will not be considered. The deadlines will be published with each round of questions. If all your answers […]
Read MoreThe #IDATrivia game! – Day 3 All questions are be related to IDA. Read them carefully, check our website, take a look at Igor’s tips, and send your guesses to marketing@hex-rays.com.Attention! Submissions made after the deadlines will not be considered. The deadlines will be published with each round of questions. If all your […]
Read MoreThe #IDATrivia game! – Day 2 All questions are be related to IDA. Read them carefully, check our website, take a look at Igor’s tips, and send your guesses to marketing@hex-rays.com.Attention! Submissions made after the deadlines will not be considered. The deadlines will be published with each round of questions. If all your […]
Read More