Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Hidden feature of IDA 4.7 (https://forum.exetools.com/showthread.php?t=14452)

sendersu 08-10-2012 03:53

Hidden feature of IDA 4.7
 
Hi all
a friend of mine asked to put some light on one very intersting subject
Its about very beginning of HexRays.
It is known that it was started back to 2001..
Here is a proof link
http://www.datarescue.com/laboratory/vd.htm
Up to 2007 it looks like noone ever tried these bits. Nevertheless the HR code was present in a couple of old IDA versions! But it was hidden.
That feature was found and you could see the result on the old good version of 4.17

Of course thats not a fully featured HR, but that is the fundament of it.
Microcode view with the following optimisation and following transformation into pseudo-code (not present in that version)

Some docs for the subject
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond.ppt
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond_white_paper.pdf

Here is the patch that opens up a secret hidden feature
you could find it in menu:
View -> Open subview -> Microinstruction (F11)

Links:
patch that opens the featue: http://www.sendspace.com/file/l1b2dq

Hope someone will find this old good hidden feature nice.....
Enjoy
All the respects (idea, inspiration and investigation) goes to a guy from cracklab named reversecode

mm10121991 08-10-2012 06:41

thanks sendersu
but a little question, what is this Microinstruction feature?
what does it ? and why and when use it?

Av0id 08-10-2012 19:44

it's young hexrays

WilliamElts 08-10-2012 21:33

Very interesting. I wonder why he can find this feature. :D.

nikre 08-10-2012 22:19

does anyone know of a book or article as make own a decompiler?

chessgod101 08-11-2012 01:46

nikre, this is not an appropriate place to make such a request. Please create a thread in the request section in the future. ;)

mm10121991 08-11-2012 01:55

@ nikre
check chapter 13 from the good old ebook reversing: secrets of reverse engineering

sendersu 08-11-2012 04:04

Quote:

Originally Posted by mm10121991 (Post 79965)
thanks sendersu
but a little question, what is this Microinstruction feature?
what does it ? and why and when use it?

Please review the links given in the top post...

BiMode 08-11-2012 23:36

So it's the first hexray's attemp to make lower level into higher, more understandable level format (like hexray decompiler plugin)...

redbull 08-14-2012 22:47

Very interesting Thanks!

julianstafari 01-02-2013 02:28

interesting. but the full version does not have these characteristics?


All times are GMT +8. The time now is 06:18.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX