最强反编译工具 ida pro 6.6 x86 arm x64 f5全插件原始安装文件泄露版 + sdk_utils
完整安装包+6.6最新sdk工具包
国内某团购群泄露的的版本
x86 arm x64 f5插件为2.0的版本 正版价值人民币3-5万
6.6更新的内容
IDA: What‘s new in 6.6
x64 Decompiler
It was tough and it required even more research than was planned but finally it arrived. The 64-bit decompiler
for x64 code is as simple to use as our other decompilers, and fast as well. Below is very short disassembly listing and the decompiler‘s output for it:
Naturally, it is the very first version and some edges are still rough, but overall it can handle real world
code very well.
Dalvik Debugger
Since Android devices become more and more popular, we implemented a debugger for them. It can debug both on
the Dalvik bytecode level and on the source code level. Below is a picture showing the bytecode debugging:
And this is the same application on the source code level:
Naturally, the user can switch between the two views any time.
IDA knows about the Dalvik objects and show them in a structured way (if the debug info was not stripped):
Please see our Dalvik debugging tutorial for more info!
PySide is shipped with IDA
The title says it all. Since it is easy to create nice interactive plugins with PySide, we decided to include
it with IDA. Now all IDA copies will have it properly installed and configured, so as a plugin writer you can rely on its existence!
UI improvements
Many small but useful features have been added or improved. Here‘s just a few:
Multiline breakpoint conditions
Python users will love this: now it is possible to write a multiline condition right in the ‘edit breakpoint‘
dialog box. IDA even accepts function definitions there!
Functions can be used in IDC snippets
Now you can use the same scripts as in separate .idc files: IDA will compile all functions present in the script
and run the main() function, if it‘s present.
Complete changelist
Processor Modules
ARM: decode ARMv7 optional Virtualization Extension instructions (HVC, ERET, banked register MRS/MSR)
ARM: decode optional ARMv7-A instructions SDIV and UDIV
ARM: decode the stand-alone "second half of Thumb BL instruction" as "BL LR, #imm", if currently selected processor
does not support Thumb-2
CLI/.NET: put user strings into a pseudo-segment (e.g. so that they can be deobfuscated)
CLI/.NET: use full names when naming methods; this reduces naming conflicts and makes the Function List more
useful for .NET binaries
MIPS: added support for n32/n64 ABI
MIPS: when tracking registers, assume that $t9 is initialized with the function‘s address
PC: Added a GCC switch idiom.
PC: handle morte non-optimized GCC switch patterns
PC: handle non-PIC form of GCC x64 switch (jmp ds:table[reg*8])
PC: improve analysis of functions that use __EH_prolog3 helpers
PC: improved prolog analysis
PPC: support for additional instructions available in some Freescale e200z cores (Volatile Context Save/Restore
APU and EFPU2)
Tricore: support for architecture V1.6
File Formats
COFF: added support for EBC object files
COFF: recognize and load Visual C++ /GL files (link-time code generation). Note: since such files contain custom
Microsoft bytecode, the code can‘t be disassembled.
DWARF: (basic) support for runtime GCC 4.8.2-produced DWARF4 information.
DWARF: Allow the plugin to mark function prototypes as being definitive (so e.g. the decompiler can rely on
them).
DWARF: At load-time, it is now possible to fine-tune the DWARF plugin regarding calling conventions.
DWARF: Can now configure whether DWARF data should be loaded when in batch mode.
DWARF: Initial support for Golang-produced DWARF debugging information.
ELF: added support for some ARCompact relocations
ELF: MIPS: use DT_MIPS_GP_VALUE to determing the executable‘s gp register value
PE: better handling of files where .idata is merged into .rdata
PE: IA64: handle IMAGE_REL_BASED_IA64_IMM64 relocations
PE: improve debug directory formatting
PE: parse new fields in the Load Configuration Directory added in Windows 8.1 (control flow guard metadata)
PE: X64: parse .pdata section at load time and create function boundaries accordingly.
PDB: added support for annotations (e.g. NT_ASSERT macro in checked builds)
这次更新了x86 64位的F5插件 单独收费哦
付最新正版的价格单
IDASTANW IDA Starter Base Named License (MS Windows) 589 USD
IDAPRONW IDA Pro Base Named License (MS Windows) 1129 USD
HEXX86W x86 Decompiler Base License (MS Windows) 2339 USD
HEXX64W x64 Decompiler Base License (MS Windows) 2351 USD
HEXARMW ARM Decompiler Base License (MS Windows) 2350 USD
Linux
IDASTANL IDA Starter Base Named License (Linux) 589 USD
IDAPRONL IDA Pro Base Named License (Linux) 1129 USD
HEXX86L x86 Decompiler Base License (Linux) 2339 USD
HEXX64L x64 Decompiler Base License (Linux) 2351 USD
HEXARML ARM Decompiler Base License (Linux) 2350 USD
Mac OS X
IDASTANM IDA Starter Base Named License (Mac OS X) 589 USD
IDAPRONM IDA Pro Base Named License (Mac OS X) 1129 USD
HEXX86M x86 Decompiler Base License (Mac OS X) 2339 USD
HEXX64M x64 Decompiler Base License (Mac OS X) 2351 USD
HEXARMM ARM Decompiler Base License (Mac OS X) 2350 USD
另外打个小广告！^.^
本人有偿承接各种专业软件的解密和资源提取,stm32 x64-x86-Arm程序转c方面的工作！
有需要的朋友请联系我！
下载地址：
http://www.juhevip.cn/thread-76201-1-1.html
大老
QQ:79234668
大老的博客
http://blog.sina.com.cn/dalaoqd?ida