BinDiff

Do you need to analyze multiple variations of essentially the same program?
Do you need to understand the changes between two versions of a program?
Are you trying to detect code theft?

zynamics BinDiff uses a unique graph-theoretical aproach to allow comparison of executables by identifying identical und similar functions.
Changed functions are displayed in an easy-to-understand symmetric layout
BinDiff_Screen1
If changes on the level of instructions occured, they are highlighted in yellow nodes - completely new pieces of code are highlighted in solid red.
BinDiff_Screen2
For those that prefer a more conventional side-by-side assembly listing, zynamics BinDiff also has a visualisation mode:
BinDiff_Screen3
zynamics BinDiff allows you to:
  • Identify identical and similar functions in different binaries
  • Port function names, anterior and posterior comment lines, standard comments and local names from one disassembly to the other
  • Detect & highlight changes between two variants of the same function

zynamics BinDiff can analyze executables compiled for the following architectures:
  • x86
  • MIPS
  • AVR
  • PA-RISC
  • SPARC
  • PowerPC
  • ...or any other architecture IDA supports (experimental)
zynamics BinDiff 3.0 is significantly faster than previous versions and is now bundled with a easy-to-use UI which allows less experienced reverse engineers to analyse code quickly as well as boosting the productivity of more experienced analysts.

The speed improvements allow for the analysis of even the largest patches giving users equipped with little more than a laptop and IDA the ability to deal with router images.

This biggest improvements are:
  • Higher comparison speed
  • Greater accuracy for functions which change only in the structure of the graph, not in the number of nodes/edges
  • Much greater accuracy on the instruction level comparison
  • A new and improved symmetric UI, bringing all the convenience of 'regular' source-code based diffing to the reverse engineering world for the first time
Pricing
zynamics BinDiff is an extension to the commercial disassembler IDA Pro. You need a recent version (4.9 or higher) of IDA Pro to use zynamics BinDiff.

Single User License 900 € (1315 US$)
5 User License 4050 € (5925 US$)
10 User License 7200 € (10535 US$)
Enterprise License 10800 € (15800 US$)

Every license includes free updates and email support for 12 months after the date of purchase. Additional 12 months of free updates can be purchased at 80% of the original license cost:

12 Month Single User Updates 720 € (1050 US$)
12 Month 5 User Updates 3240 € (4740 US$)
12 Month 10 User Updates 5760 € (8430 US$)
12 Month Enterprise Updates 8640 € (12640 US$)

In addition to the above options, zynamics also offers an attractive subscription plan for large customers: our Enterprise Subscription Plan offers all the benefits of a regular Enterprise License, but is based on a monthly fee.
The minimum duration of the subscription is 24 months. If not terminated 8 weeks in advance of expiration, the subscription will be automatically renewed for 3 months at a time.
12 Month Single User Updates 825 €/month (1200 US$/month)

Order
For placing an order or any further questions, please contact info@zynamics.com or download our order form (*.pdf).