From Collaborative RCE Tool Library
flowinsp
| Tool name: | flowinsp |
|
||
|---|---|---|---|---|
| Author: | servil | |||
| Website: | http://sharemation.com/servil/idaplugs | |||
| Current version: | 0.977 beta | |||
| Last updated: | 2008 | |||
| Direct D/L link: | http://www.sharemation.com/servil/idaplugs/flowinsp-bin.zip | |||
| License type: | Free | |||
| Description: | --------------------------------------------------------------------------- Runtime-evaluated addressing resolver plugin for Ida Pro by servil version 0.977 beta --------------------------------------------------------------------------- Flow Inspector reveals run-time evaluated call/jump targets (eg. call dword ptr [ecx+1ch], jmp eax, etc), especially suitable for binaries written in high-level language using OOP. Resolving is done in application tracing mode (thus the debuggee is fully run during plugin activity). Flowinsp only runs for Win32-PE targets (due to tracing layer API). It is optional how the caller -> callee pairs are described in idabase (as comments, x-refs, or by renaming o_mem address). |
|||
| Related URLs: |
|
|||
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!