We’re rewarding the question askers & reputations are being recalculated! Read more.
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 111

Interactive Disassembler Professional (formerly IDA Pro), a proprietary multi-platform disassembler by Hex-Rays.

1
vote
Uhm... you could do the other way around. Try this: in the address of the basic block that should be connected from that call statement you say, press Alt+F11 (change callee) and put the address where …
answered Aug 25 '16 by joxeankoret
5
votes
I think that the problem is a misunderstanding of how the Proximity Viewer works. It will not clear out all the other nodes in the graph when finding a path: it simply finds a path and adds the requir …
answered Apr 5 '13 by joxeankoret
3
votes
No, most plugins don't work, without hacks, with the freeware version because various exported functions (like callui) are either renamed or deleted.
answered Mar 8 '18 by joxeankoret
2
votes
Answering my own question: I sent an email to Hex-Rays and got back the answer in like minutes. The answer is using idaapi.get_arg_addrs(). For example, given the following code: LOAD:FFFFFFFF824911 …
answered Mar 7 '18 by joxeankoret
1
vote
Go to the function that you want to get the prototype for and press "Y". If you have the decompiler, just decompile it and check if the prototype it guessed is right. Often you will need to fix things …
answered Jul 13 '17 by joxeankoret
2
votes
2answers
I want to know using IDAPython if an instruction at the end of a basic block is a jump/branch instruction (like B or JNZ) and also determine if it's conditional or not. I need it in a CPU agnostic way …
asked Nov 29 '17 by joxeankoret
4
votes
If you want to get a node and edge count for a function's graph in IDA, you can calculate it with the given IDAPython code: func = idaapi.get_func(here()) g = idaapi.FlowChart(func) nodes = 0 edges …
answered Jun 1 '18 by joxeankoret
2
votes
You can use MyNav. In this video you can check how it can be done with this tool.
answered Mar 6 '14 by joxeankoret
4
votes
zones, agreeing things, explaining what one did to the other, etc... will slow down the project. What systems are used in such cases? IDA pro seems to be the most popular choice for this MCU … IDA is the de-facto tool for reverse engineering, although other tools might be used. But, in any case: reverse engineering an ECU (probably) by 2 persons within a week? Yeah, no. I don't think it will work unless you find out people that already have done that. Good luck... …
answered Feb 6 '18 by joxeankoret
3
votes
1answer
I always write ad-hoc code to get the values passed to function calls, like finding the XRef to a function and then tracking back disassembly to find some specific MOV or PUSH instruction. For example …
asked Mar 4 '18 by joxeankoret
3
votes
OllyDbg is a debugger for Windows x32 and x64 and its only focus is dynamic analysis, although it can be also used for non deep static analysis. IDA is the de-facto tool for doing static analysis … and also supports dynamic analysis (i.e.: debugging) for several architectures, backends and operating systems. OllyDbg doesn't have any real advantage over IDA other than, most of the time, the people …
answered Jul 25 '18 by joxeankoret
0
votes
Try using File -> Load File -> Parse C Header File (Ctrl+F9). You might need to tweak some things in the header file.
answered Jun 28 '17 by joxeankoret
1
vote
IIRC, you cannot generate a FLIRT signature from a non relocatable ELF binary. You may have better luck using BinDiff to export the function names and comments. If this is all you need it should be en …
answered Mar 5 '14 by joxeankoret
1
vote
SetType? An example in Python could be this: SetType(func_ea, "int x(int arg1, char *arg2);")
answered Jul 23 '16 by joxeankoret
1
vote
What you are asking for is called "Differential Debugging". Take a look to this tutorial to see how to do so with IDA without requiring any kind of plugins, just built-in functionality. …
answered Jan 3 by joxeankoret

15 30 50 per page