Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-10-2012, 03:53
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,067
Rept. Given: 332
Rept. Rcvd 223 Times in 115 Posts
Thanks Given: 235
Thanks Rcvd at 513 Times in 288 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Hidden feature of IDA 4.7

Hi all
a friend of mine asked to put some light on one very intersting subject
Its about very beginning of HexRays.
It is known that it was started back to 2001..
Here is a proof link
http://www.datarescue.com/laboratory/vd.htm
Up to 2007 it looks like noone ever tried these bits. Nevertheless the HR code was present in a couple of old IDA versions! But it was hidden.
That feature was found and you could see the result on the old good version of 4.17

Of course thats not a fully featured HR, but that is the fundament of it.
Microcode view with the following optimisation and following transformation into pseudo-code (not present in that version)

Some docs for the subject
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond.ppt
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond_white_paper.pdf

Here is the patch that opens up a secret hidden feature
you could find it in menu:
View -> Open subview -> Microinstruction (F11)

Links:
patch that opens the featue: http://www.sendspace.com/file/l1b2dq

Hope someone will find this old good hidden feature nice.....
Enjoy
All the respects (idea, inspiration and investigation) goes to a guy from cracklab named reversecode
Reply With Quote
The Following 4 Users Gave Reputation+1 to sendersu For This Useful Post:
mm10121991 (08-10-2012), niculaita (08-10-2012), zzfeed (08-10-2012)
  #2  
Old 08-10-2012, 06:41
mm10121991 mm10121991 is offline
VIP
 
Join Date: Feb 2011
Posts: 136
Rept. Given: 29
Rept. Rcvd 56 Times in 34 Posts
Thanks Given: 7
Thanks Rcvd at 22 Times in 13 Posts
mm10121991 Reputation: 58
thanks sendersu
but a little question, what is this Microinstruction feature?
what does it ? and why and when use it?
Reply With Quote
  #3  
Old 08-10-2012, 19:44
Av0id Av0id is offline
VIP
 
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 15 Times in 15 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
it's young hexrays
Reply With Quote
  #4  
Old 08-10-2012, 21:33
WilliamElts WilliamElts is offline
VIP
 
Join Date: Aug 2011
Posts: 120
Rept. Given: 57
Rept. Rcvd 152 Times in 71 Posts
Thanks Given: 21
Thanks Rcvd at 6 Times in 2 Posts
WilliamElts Reputation: 100-199 WilliamElts Reputation: 100-199
Very interesting. I wonder why he can find this feature. .
Reply With Quote
  #5  
Old 08-10-2012, 22:19
nikre's Avatar
nikre nikre is offline
VIP
 
Join Date: Sep 2011
Posts: 180
Rept. Given: 177
Rept. Rcvd 100 Times in 35 Posts
Thanks Given: 1
Thanks Rcvd at 10 Times in 10 Posts
nikre Reputation: 100-199 nikre Reputation: 100-199
does anyone know of a book or article as make own a decompiler?
Reply With Quote
  #6  
Old 08-11-2012, 01:46
chessgod101's Avatar
chessgod101 chessgod101 is offline
Co-Administrator
 
Join Date: Jan 2011
Location: United States
Posts: 535
Rept. Given: 2,221
Rept. Rcvd 691 Times in 219 Posts
Thanks Given: 703
Thanks Rcvd at 939 Times in 186 Posts
chessgod101 Reputation: 500-699 chessgod101 Reputation: 500-699 chessgod101 Reputation: 500-699 chessgod101 Reputation: 500-699 chessgod101 Reputation: 500-699 chessgod101 Reputation: 500-699
nikre, this is not an appropriate place to make such a request. Please create a thread in the request section in the future.
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler
Reply With Quote
  #7  
Old 08-11-2012, 01:55
mm10121991 mm10121991 is offline
VIP
 
Join Date: Feb 2011
Posts: 136
Rept. Given: 29
Rept. Rcvd 56 Times in 34 Posts
Thanks Given: 7
Thanks Rcvd at 22 Times in 13 Posts
mm10121991 Reputation: 58
Lightbulb

@ nikre
check chapter 13 from the good old ebook reversing: secrets of reverse engineering
Reply With Quote
  #8  
Old 08-11-2012, 04:04
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,067
Rept. Given: 332
Rept. Rcvd 223 Times in 115 Posts
Thanks Given: 235
Thanks Rcvd at 513 Times in 288 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by mm10121991 View Post
thanks sendersu
but a little question, what is this Microinstruction feature?
what does it ? and why and when use it?
Please review the links given in the top post...
Reply With Quote
  #9  
Old 08-11-2012, 23:36
BiMode BiMode is offline
VIP
 
Join Date: Apr 2003
Location: where...
Posts: 133
Rept. Given: 36
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 20
Thanks Rcvd at 14 Times in 10 Posts
BiMode Reputation: 2
So it's the first hexray's attemp to make lower level into higher, more understandable level format (like hexray decompiler plugin)...
Reply With Quote
  #10  
Old 08-14-2012, 22:47
redbull redbull is offline
Friend
 
Join Date: Mar 2004
Posts: 160
Rept. Given: 17
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 6 Times in 6 Posts
redbull Reputation: 5
Very interesting Thanks!
Reply With Quote
  #11  
Old 01-02-2013, 02:28
julianstafari
 
Posts: n/a
Question

interesting. but the full version does not have these characteristics?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
What is the best new feature in ida 4.9? Hero General Discussion 2 10-18-2005 04:58


All times are GMT +8. The time now is 10:23.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )