Monthly Archives: February 2008

Easy structure types

Posted on February 18, 2008 by Ilfak Guilfanov

I’m happy to tell you that a new build of the decompiler is ready! It introduces new easily accessible commands to manipulate structure pointers. First, a variable can be converted into a structure pointer with one click. Also, new the … Continue reading →

Posted in Decompilation | 9 Comments

MRXDAV.SYS and Hex-Rays Decompiler

Posted on February 13, 2008 by Ilfak Guilfanov

I wanted to present you a new plugin today. It was about switch idioms (jump tables). I spent a few hours trying to find a problematic x86 sample file but could not locate anything impressive. All jump tables were nicely … Continue reading →

Posted in Security | 1 Comment

Debugger and process memory

Posted on February 3, 2008 by Ilfak Guilfanov

Just a small note about the debugger plugins and events. Many users who try to develop a plugin for the debugger notice that IDA behaves slightly differently in the notification callbacks than anywhere else. For example, IDA might claim that … Continue reading →

Posted in IDA Pro | Comments Off