Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  x86emu 16-bit emulation support

Topic created on: July 22, 2011 05:51 CDT by Pinczakko .

Hi guys, I've been inspecting x86emu plugin source code for a couple of days and I found that the emulation provided by the plugin focuses on 32-bit execution environment with PE and ELF binaries as its targets. Has anyone modified/developed 16-bit support into the plugin? I'm interested to discuss the modifications that's needed for 16-bit execution environment.

Thanks in advance.
-Pinczakko

  lallous     July 29, 2011 04:40.27 CDT
Hi,

You can use the Bochs debugger plugin. If you can for instance paste your code in a Bochs disk image then you can trace it via IDA. Something along this: http://www.hexblog.com/?p=103

  Pinczakko     July 31, 2011 00:13.57 CDT
Thanks lallous. I have a quick look into the Bochs plugin but I'm not sure yet whether it could really help because I'm reversing a PCI expansion ROM which is loaded prior to masterboot record execution. I'm not sure if the Bochs plugin could emulate it. Nonetheless, the plugin source code should help tremendously.

  Pinczakko     August 5, 2011 12:29.44 CDT
It turns out Qemu + IDA Pro Remote GDB support is more usable.

Note: Registration is required to post to the forums.

There are 28,631 total registered users.


Recently Created Topics
windbg - olly/immunity
May/14
Reverse a WinRAR pac...
May/13
Add comments to resu...
May/10
can we code script ...
May/09
Type Casting Structu...
May/07
How to Reverse Engin...
May/03
Sulley on OS X (10.7)
May/01
Help me guys
May/01
IDA Resource Viewer ...
Apr/28
How do i use plugins...
Apr/27


Recent Forum Posts
windbg - olly/immunity
blowcheck
Help me guys
Olivier
Reverse a WinRAR pac...
NirIzr
windbg - olly/immunity
anonymouse
Reverse a WinRAR pac...
DriEm
Add comments to resu...
phn1x
IDA Resource Viewer ...
DriEm
Add comments to resu...
qiuhan
IDA Resource Viewer ...
waleeda...
IDA Resource Viewer ...
DriEm


Recent Blog Entries
waleedassar
Apr/20
OllyDbg NumberOfSections Crash

icegood
Apr/13
Advanced labels plugin for ...

waleedassar
Mar/31
GetModuleFileNameEx And Inf...

waleedassar
Mar/31
OllyDbg v1.10 And Wow64

waleedassar
Mar/29
OllyDbg Resource Table Pars...

More ...


Recent Blog Comments
raxen on:
Mar/27
Anti-Dumping

Dallas on:
Mar/22
ChapljaVM Code Obfuscator

Dallas on:
Mar/22
Hack stuff, get paid

Dallas on:
Mar/22
Exe Packer TAGGANT system f...

Dallas on:
Mar/22
Olly2 SystemTray Plugin

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit