From Collaborative RCE Tool Library
ExtraPass
| Tool name: | ExtraPass |
|
||
|---|---|---|---|---|
| Author: | Sirmabus | |||
| Website: | https://www.openrce.org/blog/view/839/An_%22extra_pass%22_for_IDA_Pro | |||
| Current version: | 2.1 | |||
| Last updated: | February 8, 2008 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | I made this little IDA plug-in to help working with some Win32 targets that don't disassemble so well. In particular exe's that have a lot of C++ indirections and lots of embedded script stubs.. It basically does a few more passes over an IDA code section. Prefers code over data. It can find a lot of missing code, functions, and alignment blocks. Works particularly well on large EXE's where there is a lot of disconnected code from heavy C++ OOP, script binds, etc. Intended for typical Win32, mainly Microsoft complied binaries. Won't work well (probably for the worse) with Delphi EXE's since those tend to have a lot of mixing of constant data in the ".text" section, but the align and missing function options might be of use still. My 2nd attempt at it, it's simple but it works well. IMHO it's working well now. Really can clean up discombobulated code. [Feb, 8, 2007] 2.1 A lot of improvement! [Nov, 26, 2007] 2.0 version. Now fixes align blocks, and finds missing functions, plus has a UI. [Aug, 28, 2007] New and improved. |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)