Clik here to view.
Plugin focus: q3vm
This is a guest entry written by David Catalán from Outpost24. His views and opinions are his own and not those of Hex-Rays. Any technical or maintenance issues regarding the code herein should be...
View ArticleClik here to view.
Igor’s Tip of the Week #173: Navigating to types from pseudocode
Previously we’ve seen how to do small edits to types directly from the pseudocode view. While this is enough for minor edits, sometimes you still need to use the full editor. Of course, it is always...
View ArticleClik here to view.
Igor’s Tip of the Week #174: IDA database (IDB) details
When you work in IDA, it saves the results of your analysis in the IDA Database, so that you can pause and continue at a later time. You can recognize the database files by their file extension .idb...
View ArticleClik here to view.
Plugin focus: Frinet
This is a guest entry written by Martin Perrier and Louis Jacotot from Synacktiv. The views and opinions expressed in this blog post are solely those of the authors and do not necessarily reflect the...
View ArticleClik here to view.
Igor’s Tip of the Week #175: IDB work directory
As we’ve seen previously, an IDB (IDA database) consists of several embedded files which contain the actual database data and which IDA reads/write directly when working with the database. By default,...
View ArticleClik here to view.
Igor’s Tip of the Week #176: Handling stack reuse in the decompiler
Previously, we discussed a situation where the decompiler wrongly used a combined stack slot for two separate variables. We could solve it because each variable had a distinct stack location, so...
View ArticleClik here to view.
Igor’s Tip of the Week #177: Unused argument attribute
In one of the past tips we mentioned the __unused attribute which can be applied to function arguments. When can it be useful? Let’s consider this code from Apple’s dyld: v19 is passed as fist...
View ArticleClik here to view.
Igor’s Tip of the Week #178: Field representation attributes
In the past, we’ve seen how structure instance representation can be changed by editing the structure in the Structures window. In IDA 8.4, a new unified view was introduced for Local Types and the...
View ArticleClik here to view.
Plugin focus: ida kmdf
This is a guest entry written by Arnaud Gatignol and Julien Staszewski from the THALIUM team. The views and opinions expressed in this blog post are solely those of the authors and do not necessarily...
View ArticleClik here to view.
Igor’s Tip of the Week #179: Bitmask enums
We’ve covered simple enums previously, but there is a different kind of enum that you may sometimes encounter or need to create manually. They are used to represent various bits (or flags) which may be...
View Article