Log in

View Full Version : Embedded firmware - multiple versions in IDA


d00f
May 27th, 2009, 09:50
I'm working on some firmware and every different market had a slightly different version compiled so the controller parameter tables and a few other settings are always located at different places in the map. 99% of the code is identical.

What is the best way to auto-recognize the code I've already spent 6 months decyphering? I've tried a few times to get ida2pat to compile into a workable plugin but it just doesn't seem to like my 64 bit vista.

Is this the best way to go about things or is there a better solution?

thanks

reverser
May 27th, 2009, 18:06
Try idb2sig. Or maybe PatchDiff or DarunGrim.

disavowed
May 27th, 2009, 22:47
You might also want to try IDACompare (http://labs.idefense.com/software/static.php#more_idacompare).

d00f
May 29th, 2009, 06:13
This 64 bit thing seems to be a big problem. I've now tried just about every plugin out there but nothing works with a 64 bit version of ida pro.