中文名: 反匯編分析工具
英文名: Hex-Rays IDA Pro
資源格式: 壓縮包
版本: v6.1 Advanced + Tools
發行時間: 2011年
制作發行: Hex-Rays
語言: 英文
簡介:

IDA Pro反匯編和調試器是一個互動的，可編程，可擴展，多處理器的反匯編，在Windows，Linux或Mac OS X的IDA Pro已成為事實上的標准，對惡意代碼進行分析，脆弱性的研究和驗證的COTS 。
IDA Pro是一個Windows或Linux或Mac OS X主持多處理器反匯編和調試器。

Hex-Rays continues to develop and support the IDA Pro disassembler. This famous software analysis tool, which is a de-facto standard in the software security industry, is an indispensable item in the toolbox of any serious software analyst. Hex-Rays will continue to maintain IDA Pro and ensure its continuous evolution.
About Hex-Rays
Founded in 2005, privately held, Belgium based, Hex-Rays SA focuses on the development of robust binary analysis tools for the IT security market. Its first public product, the Hex-Rays Decompiler plugin for IDA Pro, dramatically increases the productivity of IT security researchers involved in the analysis of real world C/C++ binaries.
The unique Hex-Rays Decompiler, which has been developed in response to the need of hundreds of IDA Pro users, is the fruit of more than ten years of proprietary research. Thanks to the speed and scalability of its core algorithms, Hex-Rays does not merely break new ground in the well known C/C++ decompilation problem: it lays foundations for future developments in the field of binary analysis. In the near future Hex-Rays SA expects to extend the role of its decompiler through the addition of several new algorithms and by offering a programmer SDK to its corporate customers.
What is IDA Pro all about?
IDA Pro is a Windows hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all.
Key Features
Multitarget Disassembler
- disassembler modules for a large number of processors. Our free SDK even allows you to roll your own custom disassembler.
- full interactivity and extendability
direct, through keyboard interaction.
through an internal programming language.
through external plugins (unlimited power: our debuggers are plugins).
- as close as possible to the high level source code
flirt technology (fast library identification and recognition technology).
type system and parameter tracking and identification
- code graphing
Multitarget Debugger
- the debugger adds dynamic analysis to the information gathered statically by the disassembler.
- offers all the features expected from a debugger and more: remote debugger, tracing.
- remote debugger: target either Windows, Linux, Mac OS X, and other machines in any combination.
- See ARM Windows CE Debugger
- Many other targets...
The IDA Pro Disassembler and Debugger is an interactive, programmable, extendible, multi-processor disassembler hosted on Windows, Linux, or Mac OS X. IDA Pro has become the de-facto standard for the analysis of hostile code, vulnerability research and COTS validation. See this executive overview for a summary of its features and uses.
http://www.hex-rays.com/idapro

This release includes:
Hex-Rays.IDA.Pro.Advanced.v6.1.Windows.incl.Hex-Rays.x86.Decompiler.v1.5.READ.NFO-RDW
Hex-Rays.IDA.Pro.Advanced.FLAIR.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.IDS.Utilities.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.LOADINT.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.SDK.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.TILIB.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.v6.1.TVision.v2009b.Source-RDW

代碼

           ▄
         █████████▄▄▄               ██████▓        ▄▄▄▄███▌
          █████████████▄            ▐█████▓        ▓██████▌
          ███████████████           ▐█████▒        ▒██████▌
          █████▀█████████▌    ▄███████████▒        ░██████▌
  ▄       █████▐██████████   ▐████████████░         ██████▌              ▄
▐▌       █████▐██████████   █████████████░ ▄▄▄█▄▄▄ ██████▌▄▄▄▄▄▄▄       ▐▌
  ▀█████▓ █████▐██████████▌  ███▐█████████▌ ███████▌██████▌███████▌▓█████▀
    ▀▀██▒ █████▐██████████▌ ▐███▐█████████▌ ▓██████▌██████▌███████▌▒██▀▀
         ░█████▐██████████▌ ▐███▐█████████▌ ░██████▌██████▌███████▌
         ▒█████▐█████▄▄▄▄▄  ▐███▄█████████▌  ██████▄██████▄███████▌
         ▓█████ ▀▀▀████████░▐█████████████▌  █████████████████████▌
         ██████    ████████▒▐█████████████▌  ▐████████████████████▌
                   ████████▓ ▀██████▀▀▀▀▀▀    ▀▀██████▀ ▀▀████████
                                                             ▀▀▀       -s6k
          ,╓#P²^``      ...,rUSSIANS dOING ThE wORLD,...      ``^²?╖,
    ,dP"`     ┌─────────────────────────────────────────────┐   `"?b,
╓$$'        │ Type of release                  Æ¿» αѽ¿ºá │     `$$╖
  I$$;         │ [ ] Keymaker [ ] Emulator [ ] Tutorial      │      ;$$I
;$$I          │ [ ] Patch    [x] Util     [ ] Documentation │        I$$;
  $$$           │ [ ] Serial   [ ] Demo     [x] Other         │         $$$
  ╔═╦════════════╧═════════════════════════════════════════════╧══════════╦═╗
  ║█║ ■ RELEASE INFORMATION                         êìöÄÉîÇûêƒ Ä Éàïêçà ■ ║█║
  ║█╟─────────────────────────────────────────────────────────────────────╢█║
  ║█║ supplier: [Juraj Malcho, ESET  ] date      : [13/Jul/2011         ] ║█║
  ║█║ cracker : [Sp0Raw (sporaw)     ] protection: [Keyfile; custom     ] ║█║
  ║█║ packager: [Sp0Raw (sporaw)     ] OS system : [Windows             ] ║█║
  ║█║ type    : [disassembler/debuggr] disks     : [xx/22, 5 Mb         ] ║█║
  ║█╠═════════════════════════════════╤═══════════════════════════════════╣█║
  ║█║ ■ RELEASE NOTES                 │            èÄîîàìÆÇÉêê è Éàïêçô ■ ║█║
  ║█╠═════════════════════════════════╧═══════════════════════════════════╣█║
  ║█║                                                                     ║█║
  ║█║ * IDA Pro Advanced v6.1 (Windows)                                   ║█║
  ║█║ * HexRays x86 Decompiler v1.5                                       ║█║
  ║█║ * HexRays Decompiler v1.5 SDK                                       ║█║
  ║█║                                                                     ║█║
  ║█║                     http://www.hex-rays.com                         ║█║
  ║█║                                                                     ║█║
  ║█║ 1. *** FOR NUKERS ***                                               ║█║
  ║█║ ---------------------                                               ║█║
  ║█║                                                                     ║█║
  ║█║ This is a TOTALLY ANOTHER RELEASE! COMPLETE PACKAGE, ORIGINAL AND   ║█║
  ║█║ FULL-FUNCTIONAL. MORE FILES, NEW VERSIONS. MY PERSONAL SUPPLY TO    ║█║
  ║█║ THE SCENE.                                                          ║█║
  ║█║                                                                     ║█║
  ║█║ It contains original files that were missed in this release:        ║█║
  ║█║   061311 Hex-Rays.IDA.Professional.v6.1-UNiQUE                      ║█║
  ║█║ (this release were based on Chinese leaked package)                 ║█║
  ║█║                                                                     ║█║
  ║█║ Also it contains latest version of the HexRays Decompiler -         ║█║
  ║█║ HexRays x86 v1.5 (08-Apr-2011).                                     ║█║
  ║█║                                                                     ║█║
  ║█║   http://www.hex-rays.com/news1.shtml#110408                        ║█║
  ║█║                                                                     ║█║
  ║█║ Moreover, this package is not a Chinese leakage (Licensed to:       ║█║
  ║█║ "Gu Tian Ren, Cai") and HAVE NO any files from it. This package was ║█║
  ║█║ got by own efforts, resources and diligence. All files are from     ║█║
  ║█║ well-known antivirus company - ESET (www.eset.sk, www.eset.com)     ║█║
  ║█║ (Licensed to: "ESET spol. s r.o.").                                 ║█║
  ║█║                                                                     ║█║
  ║█║ You can checkout this by comparing watermarks in files:             ║█║
  ║█║                                                                     ║█║
  ║█║   .\loaders\*.ldw and *.l64                                         ║█║
  ║█║   .\procs\*.w32 and *.w64                                           ║█║
  ║█║                                                                     ║█║
  ║█║ Please checkout more detailed analysis (comparison) below.          ║█║
  ║█║                                                                     ║█║
  ║█║ For persons, who are interested about details of this release       ║█║
  ║█║ please see below, "Details about release" section (Russian or       ║█║
  ║█║ English version).                                                   ║█║
  ║█║                                                                     ║█║
  ║█║                                                                     ║█║
  ║█║ 1.1. IDA v6.1 Advanced Pro x86/x64 Comparison                       ║█║
  ║█║ ---------------------------------------------                       ║█║
  ║█║                                                                     ║█║
  ║█║ Missed files in Chinese leaked package:                             ║█║
  ║█║                                                                     ║█║
  ║█║   .\ida.key    - main keyfile to make software properly working     ║█║          
  ║█║   .\idag.ico   \ IDA v6.1 Advanced Pro GUI                          ║█║
  ║█║   .\idag.exe   /                                                    ║█║
  ║█║   .\idag64.exe - IDA v6.1 Advanced Pro (x64 Analysis) GUI           ║█║
  ║█║   .\idaq64.exe - IDA v6.1 Advanced Pro (x64 Analysis) QT-GUI        ║█║
  ║█║                                                                     ║█║
  ║█║ Badly patched in Chinese leaked package:                            ║█║
  ║█║                                                                     ║█║
  ║█║   .\idaq.exe   - IDA v6.1 Advanced Pro QT-GUI, badly patched with   ║█║
  ║█║                  lost of bytes                                      ║█║
  ║█║                  (invalid relocation; crash on every modern OS      ║█║
  ║█║                  with ASLR)                                         ║█║
  ║█║                  (later it was recovered by other cracker)          ║█║
  ║█║                                                                     ║█║
  ║█║ Summary:                                                            ║█║
  ║█║                                                                     ║█║
  ║█║   Chinese package does not allow x64 analysis, because unknown guys ║█║
  ║█║   deleted GUI files (original, QT) that are required to load        ║█║
  ║█║   x64-files for analysis. I.e. x64 version is not available         ║█║
  ║█║   totally.                                                          ║█║
  ║█║                                                                     ║█║
  ║█║                                                                     ║█║
  ║█║ 1.2. HexRays Decompiler Comparison                                  ║█║
  ║█║ ----------------------------------                                  ║█║
  ║█║                                                                     ║█║
  ║█║ Chinese leaked package have no original HexRays at all.             ║█║
  ║█║ It contains pirated version of HexRays x86 v1.1 (very old) from     ║█║
  ║█║ IDA v5.5t warez release.                                            ║█║
  ║█║                                                                     ║█║
  ║█║ Here is a list of the latest original HexRays x86 v1.5.0.110408     ║█║
  ║█║ (v1.5 from 08-Apr-2011) files in the current release:               ║█║
  ║█║                                                                     ║█║
  ║█║   .\cfg\hexrays.cfg                                                 ║█║
  ║█║   .\plugins\defs.h                                                  ║█║
  ║█║   .\plugins\hexrays.plw                                             ║█║
  ║█║   .\plugins\hexrays_license.txt                                     ║█║
  ║█║   .\plugins\hexrays_sdk\include\hexrays.hpp                         ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds1\hexrays_sample1.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds1\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds2\hexrays_sample2.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds2\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds3\hexrays_sample3.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds3\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds4\hexrays_sample4.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds4\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds5\hexrays_sample5.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds5\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds6\hexrays_sample6.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds6\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds7\hexrays_sample7.cpp            ║█║
  ║█║   .\plugins\hexrays_sdk\plugins\vds7\makefile                       ║█║
  ║█║   .\plugins\hexrays_sdk\readme.txt                                  ║█║
  ║█║                                                                     ║█║
  ║█║ Summary:                                                            ║█║
  ║█║                                                                     ║█║
  ║█║   Chinese package does not have HexRays.                            ║█║
  ║█║                                                                     ║█║
  ║█║                                                                     ║█║
  ║█║ 1.3. Keyfile Details                                                ║█║
  ║█║ --------------------                                                ║█║
  ║█║                                                                     ║█║
  ║█║ 36 network licenses (users) for IDA and HexRays x86!                ║█║
  ║█║                                                                     ║█║
** Text supressed. Please, check .nfo file **