Results 1 to 6 of 6

Thread: Class Informer IDA plug-in

  1. #1

    Class Informer IDA plug-in

    My new IDA plug-in based on Igorsk's excellent article and IDC scripts.

    [Download]

    ------------------------------------------------------------
    Scans an MSVC 32bit target IDB for vftables with C++ RTTI, and MFC RTCI type data.
    Places structure defs, names, labels, and comments to make more sense of class vftables ("Virtual Function Table") and make them read
    easier as an aid to reverse engineering.
    Creates a list window with found vftables for browsing.

    RTTI ("Run-Time Type Identification"):
    http://en.wikipedia.org/wiki/RTTI

    RTCI ("Run Time Class Information") the MFC forerunner to "RTTI":
    http://msdn.microsoft.com/en-us/library/fych0hw6(VS.80).aspx
    ------------------------------------------------------------

    Example vftable output list:


    .
    .
    Example vftable info add by the plug-in:


    .
    .



    https://www.openrce.org/blog/view/1344/Class_Informer_IDA_plug-in

  2. #2
    Super Moderator Shub-nigurrath's Avatar
    Join Date
    May 2004
    Location
    Obscure Kadath
    Posts
    430
    excecllent work, this is a really nice tool. thanks!
    (`._.[*~-.,.-~* ŜħůβŇĝŕřāŧħ ₪*~-.,.-~*]._.)
    There are only 10 types of people in the world: Those who understand binary, and those who don't
    http://www.accessroot.com

  3. #3
    looks clubbing should be usefull
    http://www.reversing.dk/

  4. #4
    Really neat stuff!
    Externalist

  5. #5
    Wow.. very nice Sirmabus...

    Are you sure this is 1.0b in the zip? it says 1.0a in the output window and has no progress bar animation, also doesn't respond to the cancel or break key.

    Thanks for writing this awesome tool.

  6. #6
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

Similar Threads

  1. Exact .COD to .Class
    By raja99502 in forum The Newbie Forum
    Replies: 4
    Last Post: April 8th, 2009, 12:45
  2. Updated "Class Informer" plug-in
    By OpenRCE_Sirmabus in forum Blogs Forum
    Replies: 0
    Last Post: April 2nd, 2009, 16:17
  3. Class Informer IDA Plug-in
    By Sirmabus in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: April 2nd, 2009, 15:26
  4. My Training Class
    By OpenRCE_RolfRolles in forum Blogs Forum
    Replies: 0
    Last Post: November 24th, 2007, 18:50
  5. Where are the Class methods?
    By 5aLIVE in forum The Newbie Forum
    Replies: 1
    Last Post: July 28th, 2005, 04:25

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •