最強反編譯工具 ida pro 7.0 x86 arm x64 f5 for mac版全外掛原始安裝檔案洩露版
阿新 • • 發佈：2019-02-05
- DWARF: Store file/line number information in IDB (only if requested, since it comes with a performance penalty)
- ELF: added processing of many previously unsupported PPC64 relocations
- ELF: annotate headers (ELF, PHT, SHT) and convert more known data to structs (symtab, strtab, relocations, dynamic information)
- ELF: annotate preinit/init/fini function arrays
- ELF: convert all strtab entries to ascii strings (even the ones that are not referenced)
- ELF: describe DT_HASH and DT_GNU_HASH
- ELF: describe symbols using symtab from DYNAMIC section
- ELF: detect overlapping sections in SHT and prevent them from processing data (but still load them in the database)
- ELF: don't obliterate data when patching PLT
- ELF: don't skip processing relocations if symbol index is 0 (happens with IRELATIVE relocs)
- ELF: IDA now uses the PHT by default instead of the SHT to load segments from ELF files
- ELF: improved support for TLS variables in relocatable files
- ELF: load symbols using symtab from DYNAMIC section when .dynamic section yields no symbols
- ELF: PLT relocations for pc are now processed at relocation-application-time, instead of relying on the presence of a .plt section
- ELF: ppc: added new ida.cfg variable PPC_FIX_GNU_VLEADRELOC_BUG to work around binutils bug 20744
- ELF: process .ctors/.dtors sections for all architectures
- ELF: recognize PLT stub functions from R_386_GLOB_DAT relocations
- MACHO: support dyld_shared_cache files from OSX 10.13 and iOS 11
- MACHO: support dyld cache slide info v2. This should improve analysis for dyld_shared_cache files from iOS 10 and OSX 10.12
- MACHO: improved analysis of single modules within dyld_shared_cache files that have slide info
- MACHO: added an option to load for single module plus its dependencies for dyld cache
- MACHO: fixed incorrect resolution of Mach-O import table entries in files using both LC_DYLD_INFO_ONLY and LC_SYMTAB
- MACHO: improved speed of objc metadata parsing
- MACHO: support for apple-protected binaries from OSX versions < 10.6
- MACHO: support x64 macOS kernelcaches with ketxs relocated at runtime
- MACHO: added processing of the ARM64_RELOC_ADDEND relocation;
- MACHO: allow the user to override the ASLR slide for dyld_shared_cache files
- OBJC: added Objective-C Analysis Plugin; the plugin tries to create an xref between calls to objc_msgSend and the function that will ultimately be called by msgSend
- OBJC: perform Objective-C specific analysis on the decompiler output
- OBJC: implemented a "step into" action for Objective-C (Debugger>Run until message received)
- OBJC: allow user to jump to a method definition given a selector string (Jump>Jump by selector)
- OBJC/MACHO: IDA can now extract Objective-C type info via 'Load debug info' in the Modules view during debugging
- OBJC: now objc metadata can be parsed on demand, not just at load time
- OBJC: implement demangling of objective-C methods in Swift classes
- TDS: added support for executable with debug info appended to the end of the file
-
PDB: added an explicit check for odd paths (e.g. UNC) of pdb files; if such a path is detected, we display one more warning to the user