# IDA 5.0

## Major features

* Introduction of a graph based used interface. The text interface remains instantly available. ![](https://545602138-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FucByjS46IhJacH1pbIKC%2Fuploads%2Fgit-blob-ca51aa5bde76577b4f056b02575a3b9a002f371c%2Fgraph-based-ui.png?alt=media)

## Processor Specific Enhancements

* ARM: improved distinction of code and data: conditional instructions do not start a new function.
* ARM: IDA knows that a function call destroys R0.
* ARM: IDA knows that only GNU AS reverts halves of double data items; for other assemblers the double number format conforms the standard (IEEE).
* ARM: IDA tries to find out the base register of the stack variables by looking for 'mov rN, SP' instructions.
* ARM: MOV R12, SP is recognized as the beginning of a code sequence.
* ARM: new target assembler: ARM/Thumb Macro Assembler.
* ARM: slightly better jump table recognition.
* JAVA: complete rewrite of the Java module to support the new JDK 1.5 (or Java5.0)
* PC: added support for the newly documented 'cmpxchg16b' instruction.
* PC: improved function analysis.
* PC: better test of instruction sanity.
* PC: ins instruction was always displayed in the long form.
* PC: more careful approach to jump table xref construction.
* PC: previously undocumented form of the 'test' instruction is recognized (group 3modrm /1)
* PC: newer versions of SEH\_ prolog/epilog functions are recognized
* 6812: the HCS12 config file has been updated
* 78k0: has been replaced by a rewritten module
* 78k0s: has been replaced by a rewritten module

## File Formats

* ELF: added support for SPARC unaligned relocation types.
* ELF: relocations in .gnu.conflict section are ignored since this section is not loaded by default.
* COFF: MC68K: support for R\_PCR24 relocation type has been added (used in PalmOS).
* DBG: ida does not create functions for data names.
* more PalmPilot system trap codes are added.
* if the input file is corrupted, IDA displays an error message without exiting to the OS.

## Kernel Enhancements

* DDK2003 type library files have been updated; wnet/windows.h types have been added.
* Flow charts of processors with delayed jump slots are generated correctly (this feature requires support from the processor module).
* a regular function is created instead of a function tail if it makes sense.
* analysis: the rule which creates functions because of a dref has been improved.
* better use of fixup information during the final pass of the analysis.
* FLAIR: CodeWarrior library files for 6812 are supported (since the file format is undocumented, there might be problems).
* IDA does not automatically assign a type to local names because it rarely makes sense
* recognition of function pointer tables has been improved.
* turning off the solid border lines turns off SUBROUTINE lines too.
* a full path is accepted in ida.cfg:GRAPH\_VISUALIZER.
* minor improvement of switch table construction (if a jump table crossed through segment boundaries, IDA would fail to create it)
* signature files have been updated or added: Borland Developer Studio 6, Microsoft Visual C runtime version 8 (.net) 32-bit and 64-bit libraries, Microsoft MFC 64-bit, Microsoft Active Template Library 64-bit.
* the MD5 of the input file is saved in the database.

## IDC & SDK

* IDC: renimp.idc: is a new script that renames import table entries.
* IDC: the SetType() function can be used to delete the existing type assigned to an address.
* IDC: SetSegmentAttr() accepts SEGATTR\_BITNESS attribute and changes the segment bitness without reanalyzing it.
* SDK: calc\_bare\_name() has been improved to handle \_*imp* and c++ mangled names.
* SDK: guess\_func\_type() takes into account the number of purged bytes from the stack: if the tail parameters were not used by the function and therefore were not created by IDA, we still create dummy arguments for the in the function type.
* SDK, IDC: del\_segm() accepts a combination of bits as the second parameter.
* SDK: added a flag to flow\_chart\_t to avoid computing external blocks.
* SDK: added processor\_t::gen\_asm\_or\_lst to customize asm or lst file generation.
* SDK: added processor\_t::is\_insn\_table\_jump to determine if an instruction is really a table jump or call.
* SDK: added SDL\_HIDETYPE bit for segments – it is used to hide the segment type from the disassembly listing.
* SDK: added ui\_create\_tform and other callbacks to manipulate MDI child windows from plugin.
* SDK: analyze\_area() function can be applied to debugger segments as well; before it was skipping them.
* SDK: an API to work with graph viewer is added. See the sample plugin ugraph
* SDK: areacb\_t::for\_all\_areas() function to enumerate all areas in the specified range.
* SDK: autoIsOk() would return false for old database when called from ph.oldfile
* SDK: callback out\_src\_file\_lnnum to generate source file name and line number directives.
* SDK: if inf.lowoff == BADADDR, no operand will be considered as 'void' operand.
* SDK: if Namechars\[] is empty, all characters are enabled in names.
* SDK: if public or weak keywords are defined as empty strings, then IDA does not display the corresponding directives.
* SDK: introduced new event processor\_t::auto\_empty\_finally to handle the end of autoanalysis for efficiently.
* SDK: new function entab() to replace spaces by tabulations.
* SDK: new function qmake\_full\_path()
* SDK: ph.get\_autocmt notification to generate dynamic predefined comments for instruction.
* SDK: new function get\_compiler\_name()
* SDK: added CH\_MULTI\_EDIT bit for the list choosers.
* SDK: added read\_user\_config\_file() function.
* SDK: loader\_finished event has been added.
* SDK: 4 new processor modules and their source code have been donated by a kind IDA user: Toshiba TLCS-900, Rockwell C39, NSC CR16, Panasonic MN10200

## User Interface

* GUI: the analysis indicator is refreshed at most 10 times per second.
* GUI: the keypad 5 scrolls the window to center the keyboard cursor.
* GUI: the Ctrl-F/F3 hotkeys search in the database notepad.
* the input fields of most dialog boxes are remembered in the registry and database; database settings have priority over registry settings; TEXT\_SEARCH\_CASE\_SENSITIVE and BIN\_SEARCH\_CASE\_SENSITIVE are removed from the configuration files; added RESTORE\_UI\_VARS and USE\_INIFILE user interface config parameters.
* it is possible to delete marked positions from the 'jump to marked position' dialog box.
* UI: 'search for all occurrences' flag works in the selected area if there is any.
* UI: 'set type' command works with a location in the middle of a function if the location already has a type; otherwise it is applied to the whole function.
* UI: the text version asks the permission to destroy the existing items if they prevent the creation of another item specified by the user; the config file parameter is AUTO\_UNDEFINE
* wingraph32 related commands are now available for all platforms (Linux, Windows)

## Debugger

* debugger colors do not override item colors anymore.
* debugger: start the application in its own directory by default if not instant debugging.
* debugger: debugging is supported in graph mode.

## Bug Fixes

* the "function calls" window was not saved/restored in the desktop configuration; its name in the tab control was wrong (had function names)
* the "incompatible main desktop config" message has been removed; such desktops are now silently ignored.
* the 64-bit debugger did not understand register names in idc expressions
* a corrupted database with -1 as the assembler type could crash IDA
* if turned off the analysis indicator in the options dialog box would read 'idle' instead of being empty.
* analysis could loop infinitely on some files.
* clicking Close in the taskbar at the the startup screen or welcome dialog could crash IDA
* closing the 'function calls' window would not delete the corresponding menu item in Windows men.
* corrupted DBG files could crash IDA.
* debugger: terminating multithreaded applications required several attempts.
* HTML files generated from an automated IDC script always had a black background.
* IDA could display a message asking the permission to delete debug segments and later fail because the answer came too late.
* if IDA had been installed in a C:\Program Files subdirectory, launching wingraph32 could lead to the execution of c:\program.exe (if present)
* in 64-bit mode IDA could display an instruction with a floating point register fp(8) or higher
* in MS DOS COM files it was impossible to use offsets based on the beginning of the first segment
* it was impossible to run an IDC script using the script toolbar if there was no open database
* JAVA: it was impossible to use IDC in the graphical version.
* memory hex dump files without the address column were loaded incorrectly.
* pfn pointer could become stale during function chunk enumeration leading to wrong flow charts.
* REX prefix should not modify AL register in most AMD64 instructions.
* the 'print flags' command was not correctly displaying national characters in the comments.
* the analysis could infinitely loop on garbage bytes looking as legitimate code.
* the analysis pointer in the navigation band stayed visible even after end of the analysis (until the first refresh).
* IDA could crash if the input file could not be opened (blocked by an antivirus, for example)
* the 'rename register' command would an cause 'internal error' if the old register name was empty.
* the help page about maximal address space was missing from the help file.
* A problem in the database naming logic after an unclosed debugging session was fixed.
* the 64-bit text version was displaying zeroes in the autoanalysis indicator (in fact, the upper part of the address). Switched to the low part since it gives more information