Hex-Rays IDA Professional Advanced And Decompiler Full Activated

x86, x64, ARM64

The best-of-breed binary code analysis tool, an indispensable item in the toolbox of world-class software analysts, reverse engineers, malware analysts, and cybersecurity professionals.

A powerful disassembler and a versatile debugger

IDA Pro is a disassembler is capable of creating maps of their execution to show the binary instructions that are actually executed by the processor in a symbolic representation (assembly language). Advanced techniques have been implemented into IDA Pro so that it can generate assembly language source code from machine-executable code and make this complex code more human-readable.

The debugging feature augmented IDA with the dynamic analysis. It supports multiple debugging targets and can handle remote applications. Its cross-platform debugging capability enables instant debugging, easy connection to both local and remote processes, and support for 64-bit systems and new connection possibilities.

Nothing beats the human brain

Because we know that one second of insight still beats hundred years of processing time, the IDA Disassembler offers as much interactivity as is possible. Virtually anything in the disassembly can be modified, manipulated, rearranged, or redefined.

Static disassembly is limited

Mere static disassembly does not tell the whole story. Encrypted or obfuscated code is frequently present in today’s hostile code; the exact distinction between code and data is an art rather than a science. The IDA Disassembler’s interactivity is complemented by an internal scripting language, a Windows application/kernel debugger, a Linux application debugger, an 80×86 Mac OS X application debugger (both 32 and 64 bits are supported), and much much more…

Innovation must be cherished

As an additional incentive to create new plugins for our products, we hold an annual plugin contest. The creators of useful public plugins can win a cash prize. We also publish the names on our Hall of Fame pages.

Time is the essence

Gone are the days when an assembly language wizard would glance at a few op-codes and grasp the purpose of a program. Today’s viruses and worms are often written in a high-level language. Thanks to our unique FLIRT technology and our advanced stack tracking capabilities, IDA Disassembler works as close as is possible to the original source code.

You know best

We are the disassembler and debugger specialists but you are the ones producing the real work. You know what you need better than we do. That is why the IDA SDK allows you to extend and tailor IDA to your specific needs.

Security is of high priority for us

We want our users to be safe while using our tools. This is why in addition to in-house testing, code reviews, and secure coding practices we introduced a bug bounty program. Reporters of critical bugs in our software can win a cash bounty. This way vulnerabilities in our software are reported directly to us. Naturally, we react immediately and issue a hotfix as soon as possible.

IDA Pro has become the de-facto

Standard for the analysis of hostile code,
vulnerability research and commercial off-the-shelf validation

Advantages of the Decompiler

In comparison to low-level assembly language, high-level language representation in the Decompiler has several advantages:

concise: requires less time to read it;
structured: program logic is more obvious;
dynamic: variable names and types can be changed on the fly;
familiar: no need to learn the assembly language;

The pseudocode text is generated on the fly. Our technology is fast enough to analyze 99% of functions within a couple of seconds.

Currently, the decompiler supports compiler-generated code for the x86, x64, ARM32, ARM64, and PowerPC processors. We plan to port it to other platforms in the future. The programmatic API allows our customers to improve the decompiler output. Vulnerability search, software validation, coverage analysis are the directions that immediately come to mind.

The decompiler runs on MS Windows, Linux, and Mac OS X. The GUI and text IDA versions are supported.

IDA PRO 7.7.220118 (SP1) (x86, x64, ARM64) Full Activated

Complete changelist:

Decompiler:

improve return value recognition in golang functions

PPC:

improved the analysis speed of arrays filled with 0xFF bytes

Bugfixes

BUGFIX: ARM Mac debugger could fail to launch a universal binary when run in instant debugging mode
BUGFIX: decompiler: fix decompilation of switches when the switch register is reused between range check and indirect jump
BUGFIX: decompiler: fixed multiple interrs
BUGFIX: decompiler: fixed wrong warning about lvar allocation failure for functions with scattered return value
BUGFIX: golang: fix annotation of rtype methods in 64 bit binaries
BUGFIX: launching the Mac debugger with an empty database could cause the debugged application to behave erratically
BUGFIX: Local ARM Mac OS debugger was missing from the Run/Attach menus when starting IDA with an empty idb
BUGFIX: MACHO: IDA would fail to properly load modules from some iOS15 dyldcaches (iPhone X and earlier)
BUGFIX: PC: movdir64b with wrong operands would be erroneously decoded and cause a crash
BUGFIX: the Debugger menu could disappear when using IDA Home
BUGFIX: ui/qt: IDA could fail to display certain unicode codepoints correctly
BUGFIX: UI: filter dropdown in “Modify filters” dialog could grow too wide if long filter strings were added
BUGFIX: Windbg: breakpoints were not restored correctly in databases created from DMP files
BUGFIX: windbg: IDA could loop infinitely when debugging Windows startup on machine with multiple processors
BUGFIX: XTENSA: label operands for loop instructions were decoded as immediate