View Single Post
  #1  
Old 08-10-2012, 03:53
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Hidden feature of IDA 4.7

Hi all
a friend of mine asked to put some light on one very intersting subject
Its about very beginning of HexRays.
It is known that it was started back to 2001..
Here is a proof link
http://www.datarescue.com/laboratory/vd.htm
Up to 2007 it looks like noone ever tried these bits. Nevertheless the HR code was present in a couple of old IDA versions! But it was hidden.
That feature was found and you could see the result on the old good version of 4.17

Of course thats not a fully featured HR, but that is the fundament of it.
Microcode view with the following optimisation and following transformation into pseudo-code (not present in that version)

Some docs for the subject
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond.ppt
http://www.hex-rays.com/products/ida/support/ppt/decompilers_and_beyond_white_paper.pdf

Here is the patch that opens up a secret hidden feature
you could find it in menu:
View -> Open subview -> Microinstruction (F11)

Links:
patch that opens the featue: http://www.sendspace.com/file/l1b2dq

Hope someone will find this old good hidden feature nice.....
Enjoy
All the respects (idea, inspiration and investigation) goes to a guy from cracklab named reversecode
Reply With Quote
The Following 4 Users Gave Reputation+1 to sendersu For This Useful Post:
mm10121991 (08-10-2012), niculaita (08-10-2012), zzfeed (08-10-2012)