Interactive Disassembler Totally Explained

Everything about The Interactive Disassembler totally explained

The Interactive Disassembler, more commonly known as simply IDA, is a commercial disassembler widely used for reverse engineering. It supports a variety of executable formats for different processors and operating systems. It also can be used as a debugger for Windows PE, Mac OS X Mach-O, and Linux ELF executables. Although IDA performs a large degree of automatic code analysis to a certain extent, leveraging cross-references between code sections, knowledge of parameters of API calls, and other information, it's focused on being interactive. A typical IDA user will begin with an automatically generated disassembly listing and then rename, annotate, or otherwise add information to the listing, until it becomes clear what it does, creating an effective reverse-engineering.
Created as a shareware application by Ilfak Guilfanov, it was later turned into a commercial product by DataRescue, a Belgian company, who improved it and sold it under the name IDA Pro. In 2007, Guilfanov founded Hex-Rays to pursue the development of the Hex-Rays Decompiler IDA extension. In January 2008, Hex-Rays assumed the development and support of Datarescue's IDA Pro.
Ilfak is the main author of IDA (Interactive Disassembler Pro).

Scripting

"IDC scripts" make it possible to extend the operation of the disassembler. Some helpful scripts are provided, which can serve as the basis for user written scripts. Most frequently scripts are used for extra modification of the generated code. For example, external symbol tables can be loaded thereby using the function names of the original source code. There are websites devoted to IDA scripts and offer assistance for frequently arising problems.
Users have created plugins that allow other common scripting languages to be used instead of, or in addition to, IDC. IdaRUB

supports Ruby and IDAPython

adds support for Python.

Supported systems/processors/compilers

Operating systems
- x86 Windows GUI
- x86 Windows console
- x86 Linux console
- x86 Mac OS X
- ARM Windows CE
Executable file formats
- PE (Windows)
- ELF (Linux, most *BSD)
- Mach-O (Mac OS X)
- Netware .exe
- OS/2 .exe
- Geos .exe
- raw binary, such as a ROM image
Processors
- Intel 80x86 family
- ARM, including thumb code
- Motorola 68xxx/h8
- Zilog Z80
- MOS Technology 6502
- Intel i860
- DEC Alpha
- Analog Devices ADSP218x
- Angstrem KR1878
- Atmel AVR series
- DEC series PDP11
- Fujitsu F2MC16L/F2MC16LX
- Fujitsu FR 32-bit Family
- Hitachi SH3/SH3B/SH4/SH4B
- Hitachi H8: h8300/h8300a/h8s300/h8500
- Intel 196 series: 80196/80196NP
- Intel 51 series: 8051/80251b/80251s/80930b/80930s
- Intel i960 series
- Intel ia64 series
- Java virtual machine
- MIPS: mipsb/mipsl/mipsr/mipsrl/r5900b/r5900l
- Microchip PIC: PIC12Cxx/PIC16Cxx/PIC18Cxx
- MSIL
- Mitsubishi 7700 Family: m7700/m7750
- Mitsubishi m32/m32rx
- Mitsubishi m740
- Mitsubishi m7900
- Motorola DSP 5600x Family: dsp561xx/dsp5663xx/dsp566xx/dsp56k
- Motorola ColdFire
- Motorola HCS12
- NEC 78K0/78K0S
- PA-RISC
- PowerPC
- SGS-Thomson ST20/ST20c4/ST7
- SPARC Family
- Samsung SAM8
- Siemens C166 series
- TMS320Cxxx series
Compiler/libraries (for automatic library function recognition)
- Borland C++ 5.x for DOS/Windows
- Borland C++ 3.1
- Borland C Builder v4 for DOS/Windows
- GNU C++ for Cygwin
- MS C (16 bit) for DOS/Windows
- MS Visual Studio .NET
- MS Visual C++ v6
- Watcom C++ (16/32 bit) for DOS/OS2
- ARM C v1.2
- GNU C++ for Unix/common

Further Information

Get more info on 'Interactive Disassembler'.

External Link Exchanges

Do you know how hard it is to get a link from a large encyclopaedia? Well we're different and will prove it. To get a link from us just add the following HTML to your site on a relevant page:

<a href="http://interactive_disassembler.totallyexplained.com">Interactive Disassembler Totally Explained</a>

Then simply click through this link from your web page. Our crawlers will verify your link, extract the title of your web page and instantly add a link back to it. If you like you can remove the words Totally Explained and embed the link in article text.
As long as your link remains in place, we'll keep our link to you right here. Please play fair - our crawlers are watching. Your site must be closely related to this one's topic. Any kind of spamming, dubious practises or removing the link will result in your link from us being dropped and, potentially, your whole site being banned.