Comments for blog.zynamics.com

Comment on Objective-C reversing (Part II) by luoc

luoc — Tue, 18 Sep 2012 11:51:58 +0000

thanks for your reply. I say it seems doing nothing because the script always report “xxx total calls, 0 resolved”, and the the IDA view remain the same, perhaps IDA change something later. it’s ture that IDA improve much when analyze the objective-c. I just report my result to you. Anyway, thanks for your blog, it’s very helpful to me.

Comment on Objective-C reversing (Part II) by Jose Duart

Jose Duart — Tue, 18 Sep 2012 09:34:48 +0000

Hi luoc, I didn’t work with it lately, but it should work (I’ll try to test it with 6.3). In any case, IDA’s own objective-c analysis is improving a lot so I’m not sure if that script is useful anymore.

Comment on Objective-C reversing (Part II) by luoc

luoc — Sat, 15 Sep 2012 08:11:38 +0000

Does objc_helper still works? It seems it doing nothing in IDA 6.3…

Comment on Memoryze + VxClass vs Zeus by zynamics VxClass and memory analysis |

zynamics VxClass and memory analysis | — Wed, 15 Aug 2012 14:21:48 +0000

[...] a time with Memoryze and Audit Viewer. Thomas has a great write-up of how this process works here. I will not attempt to explain the article, but below is a glimpse. Two pieces of malware [...]

Comment on BinDiff 4.0 available today :-) by Hiber

Hiber — Sat, 21 Jul 2012 22:12:52 +0000

I find “Compare binary files for x86, MIPS, ARM, PowerPC, and other architectures supported by IDA Pro” in the description of “Use Cases”.

Does BinDiff support C166(Infineon)? Does it have all the same features as for x86/ARM/PowerPC/MIPS?

Comment on Importing MSDN documentation into IDA Pro by Acquiring hxcomp.exe without having Visual Studio installed | Technical Problems

Thu, 19 Jul 2012 19:13:46 +0000

[...] I was doing this I ran across a Zynamics script which purports to import function details from MSDN documentation into IDA. To cut a long story short you need hxcomp.exe which as you can [...]

Comment on BinDiff 4.0 available today :-) by Christian Blichmann

Christian Blichmann — Thu, 19 Jul 2012 07:08:34 +0000

We discontinued the assembly view in BinDiff 4.0. The next version may feature a similar view again.

Comment on BinDiff 4.0 available today :-) by Hello

Hello — Thu, 19 Jul 2012 00:35:53 +0000

I’m using bindiff4. How can i use the text view (assembly view) ?

Comment on Objective-C reversing (Part I) by zynamics Objective-C helper script | 火星信息安全研究院

zynamics Objective-C helper script | 火星信息安全研究院 — Wed, 11 Jul 2012 06:16:52 +0000

[...] http://blog.zynamics.com/2010/04/27/objective-c-reversing-i/ http://blog.zynamics.com/2010/04/27/objective-c-reversing-ii/ [...]

Comment on Exploring malware relations by SANS EU Malware in Memory | M-unition

SANS EU Malware in Memory | M-unition — Mon, 28 May 2012 04:07:38 +0000

[...] with the line up of this SANS EU conference. It has a very eclectic mix of people talking. Ero Carrera will be dicussing malware analysis. While Ero isn’t a forenscitar, his insight into malware [...]