PDA

View Full Version : IDR labels and function prototypes => IDA?


Cherry
December 31st, 2010, 12:31
Hello!

I was looking for a way to "reconstruct" the class names in a Delphi executable and import them in my IDA database. I also wanted to find out what methods are constructors/destructors, and what functions are methods of what class.

I found the "Interactive Delphi Reconstructor" (http://kpnc.org/idr32/en/index.htm), a really great tool, it even tells me the type of some function parameters and stuff like that, it would be really useful for me to get this information into my IDA database...

Does anybody have an idea how to do that?

Happy new year,
Cherry

disavowed
December 31st, 2010, 15:27
http://www.woodmann.com/collaborative/tools/index.php/DeDe allows you to export MAP files for IDA. Plus, it's open-source, so you can extend it to do whatever you like.

Cherry
January 2nd, 2011, 07:54
I know DeDe; and IDR also exports MAP files...

But - I don't know, am I blind? - how can I import MAP files in IDA? I only found an option to export them...

disavowed
January 2nd, 2011, 09:37
http://www.woodmann.com/collaborative/tools/index.php/Fast_IDB2Sig_and_LoadMap_IDA_plugins

Cherry
January 2nd, 2011, 09:50
Oh - great, thank you. This at least solves the labels problem. Any idea for the prototypes and comments for variable types?

disavowed
January 2nd, 2011, 13:17
Both DeDe and LoadMap are open-source, so you can extend them yourself as needed.

Cherry
January 2nd, 2011, 13:23
Well, I am talking about IDR, not DeDe.

And IDR has some features DeDe hasn't.

disavowed
January 2nd, 2011, 16:44
Ah, dunno, haven't tried IDR