IDA Pro

Description

A Powerful disassembler and a versatile debugger. IDA Pro as a disassembler is capable of creating maps of their execution to show the binary instructions that are actually executed by the processor in a symbolic representation (assembly language). Advanced techniques have been implemented into IDA Pro so that it can generate assembly language source code from machine-executable code and make this complex code more human-readable.

The debugging feature augmented IDA with the dynamic analysis. It supports multiple debugging targets and can handle remote applications. Its cross-platform debugging capability enables instant debugging, easy connection to both local and remote processes and support for 64-bit systems and new connection possibilities.

Interactive 

IDA Pro allows the human analyst to override its decisions or to provide hints so that the analyst can work seamlessly and quickly with the disassembler and analyze binary code more intuitively.

Integrations

IDA runs on all standard platforms and handles multiple processors. It can also load and disassembles virtually any file format and therefore augment its analysis speed.

Lumina server

The Lumina server holds metadata (names, prototypes, operand types, …) about a large number of well-known functions and helps improve the disassembly listing through users’ search.

Programmable

IDA Pro is a complete integrated development environment. It consists of a very powerful macro-like language (IDC or IDAPython) that can be used to automate simple to medium complexity tasks.

Open plug-in architecture

IDA’s functionalities can be easily extended by the use of programmable plug-ins. SDK is available for all registered IDA users.

F.L.I.R.T

Fast Library Identification and Recognition Technology identifies standard function calls for many compilers. This technology allows IDA to recognize standard library functions generated by supported compilers and greatly improves the usability and readability of generated disassemblies.

Speed

IDA Pro analyzes binaries in a matter of seconds.

Maturity

Thousands of test cases running on our server farm 24/7.

Security

Code graphing provides a pictorial overview of the code structure at a glance.

Substantial changes

Is to be expected in every release: new features, supported processors, etc which are all added after deliberation and discussion.

About Hex-Rays

Founded in 2005, privately held, Belgium based, Hex-Rays SA focuses on the development of fast, stable, and robust binary analysis tools for the IT security market and is independent of governmental agencies and stock market pressure. Its world-renowned product IDA Pro is the premier product for software disassembly. Hex-Rays has also released the Hex-Rays Decompiler plugin for IDA Pro, which dramatically increases the productivity of IT security researchers involved in the analysis of real world C/C++ binaries.

The unique Hex-Rays Decompiler, which has been developed in response to the need of hundreds of IDA users, is the fruit of more than ten years of proprietary research. Thanks to the speed and scalability of its core algorithms, Hex-Rays does not merely break new ground in the well known C/C++ decompilation problem: it lays foundations for future developments in the field of binary analysis. Hex-Rays SA also expands the power and flexibility of its decompiler through the addition of several new algorithms and by offering an SDK as part of its package.

Mr. Guilfanov, the founder and CEO of Hex-Rays SA, holds a BSc in Mathematics from Moscow State University. He is the senior architect of several highly regarded software packages including IDA Pro, a multi-platform, multi-processor, disassembler and debugger. Mr. Guilfanov is also known for having released, on 31 Dec 2005, a highly publicized unofficial fix for the Windows Metafile (WMF) vulnerability in the Microsoft Windows operating system. He currently lives in Belgium with his wife and his three boys.

Datasheets

Video

Categories