Team
- Ilfak Guilfanov
- Elias Bachaalany
- Igor Skochinsky
- Daniel Pistelli
The IDA Pro Book (2nd Ed)
-
Recent Posts
Recent Comments
- Daniel on The trace replayer
- joxean on The trace replayer
- joxean on The trace replayer
- Daniel on The trace replayer
- mkravchik on The trace replayer
Categories
Archives
- January 2012
- October 2011
- September 2011
- August 2011
- July 2011
- May 2011
- April 2011
- February 2011
- January 2011
- December 2010
- October 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- February 2009
- January 2009
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- April 2008
- March 2008
- February 2008
- January 2008
- November 2007
- October 2007
- September 2007
- August 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- October 2006
- September 2006
- August 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
Category Archives: Programming
Code viewer, forms & timers
In this post I’ll present some new things in IDA 6.2. There’s a new control, the code viewer, some additions to forms and the introduction of timers to discuss. All these new features have been exposed to the SDK, so … Continue reading
Posted in IDA Pro, Programming
Leave a comment
When choosers invade forms
With the upcoming IDA 6.1 it will be possible to create forms which host chooser controls. This feature will be available in the Qt and text version (not so in the VCL one).
Posted in IDA Pro, Programming
2 Comments
IDA & Qt: Under the hood
Generally speaking most plugins for IDA can be written by using only the provided SDK. The API environment provided by IDA is vast and gives the plugin writer the capability to display graphical elements such as colored text views, graphs, … Continue reading
Calculating API hashes with IDA Pro
Many times when debugging malware you discover that the malware does not import any function, replaces API names by hashes and tries to resolve the addresses by looking up which API name has the desired hash! In this blog post … Continue reading
Posted in IDA Pro, Programming
11 Comments
Book Review: The Art of Assembly Language, 2nd Edition
Have you ever tried to teach x86 assembly language programming to someone coming from high level language programming background and discovered that it was hard? Before being able to write a simple “Hello World” program one needs to know a … Continue reading
Posted in Programming
7 Comments
Casts are bad
Halvar and Dennis Elser recently blogged about a serious vulnerability in the ATL libraries. A few days ago, Microsoft released an emergency “out-of-band” patch. Yes, the bug was that nasty, and since it is in a library, many MS Windows … Continue reading
Posted in Programming, Security
5 Comments
Never say never
I never thought that I’d be directly hit by an IE bug. However, it happened today. This page: http://www.hex-rays.com/compare.shtml does not render correctly in IE7. I tried everything, got rid of all validator complaints, rearranged the code, played with the … Continue reading
Posted in Programming
8 Comments
Finally, good STL replacement?
A quite interesting document for everyone who programs in C++: http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2007/n2271.html I’m even tempted to switch to it when/if it becomes available.
Posted in Programming
2 Comments
Double renaming
Quite often I have to revise old code in IDA Pro. Given its age, it happens almost every time a new feature is added (two exceptions: the bTree and the virtual memory manager are basically the same as about 17 … Continue reading
Posted in Programming
7 Comments
Confusing instruction
A few days ago I was working on the x86 IDA module. The goal was to have it recognize jump tables for 64-bit processors. This is routine: we have to add new instruction idioms to the analysis engine from time … Continue reading
Posted in Programming
7 Comments
