Page 4 of 6

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 4:23 pm
by prairie
ok, total IDA noob here. I suppose to get a valid database it has to finish analyzing right? I will re-upload after that.

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 4:32 pm
by bugficks
heh.. yar, will take some hours e.g. for F exeTV i need smth like 1+ days and for exeAPP 2+ days :)

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 4:33 pm
by juusso
yes. sure, you have to wait until analyzing finishes. It takes a while (24h or more). Just in case you have access to one of GOV supercomputers, then...

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 4:37 pm
by bugficks
@nsa are you listening... i ll bet you are :)))

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 4:38 pm
by prairie
hey, I learned alot today, thanks! It's on address 00Fxxxxx now, has to go to 043D288C, looks like it'll take a couple of hours but not 24.


p.s. confirmed ChannelInfo and RCremap also work.

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 7:16 pm
by prairie
The initial autoanalysis has been finished.

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 8:08 pm
by juusso
nah, still corrupt. I think you should wait until it really finishes :)

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 9:54 pm
by prairie
hmm...I downloaded the .rar, moved the original binary so IDA couldn't find it, and opened the database without problem. so I thinks it's done and self-contained. (also IDA says "IDLE" in bottom left corner) Re-uploadedan IDA generated deflated version this time.

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 10:07 pm
by bugficks
still getting idb corrupted. are u using some official/bought ida release? if so that might be a problem :)

Re: Toolchain guidance needed

Posted: Sat Sep 21, 2013 10:14 pm
by prairie
no it's "unofficial", does it matter if I'm using 32bit or 64bit version, the one I uploaded is from 32bit.