1

I have a binary file for known hardware platform, but nothing more is known.

When I load this file in IDA (with default parameters), nothing good happens - at least does not appear xrefs to readable strings.

I suggest that the case in the loading parameters: the loading address and the entry point. Maybe some even.

The only solution I see in the bruteforce these parameters and re-launch auto analysis. Before that I would like to help IDA by designation some pieces of code - readable strings as strings, small common hardware patterns as code pieces.

Success criteria - the appearance of xrefs to the strings.

Unfortunately I'm newbie in IDAPython, and I'm only has learned to show to IDA strings (by MakeStr-function).

How can I change loading parameters and launch full auto-analysis in IDAPython script?

  • 1
    Before you go ahead and bruteforce - what do you know about the platform? Do you know the hardware's boot address and such? – tmr232 Feb 15 '16 at 12:12
  • Unfortunately I'm know only platform type - PowerPC and nothing more. – ersten Feb 15 '16 at 20:56
  • And is the binary file the full firmware? – tmr232 Feb 16 '16 at 8:29
  • I'm not sure, but I'm assuming that it is not full firmware, most likely, this is only part of the changeable firmware. – ersten Feb 16 '16 at 20:24
  • Do you have a running version of the software, or only the binary? – tmr232 Feb 18 '16 at 7:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.