首页
社区
课程
招聘
iDEFENSE IDACompare
发表于: 2005-12-18 21:33 3979

iDEFENSE IDACompare

2005-12-18 21:33
3979
The IDACompare and SysAnalyzer projects have reached their public release dates and are now available for download.

Author: David Zimmer  
Size: 1.2Mb
MD5: 8F277701D5B9C712B4B1E05B51D3C15C

IDACompare is a plugin designed to compare and match up equivalent functions across two IDA databases. IDACompare was primarily designed for analyzing changes across malcode variants, it should also find good use when conducting patch analysis.

Once function matches have been made, names can be ported across disassemblies, or sequentially renamed in both.

Project also implements a signature scanner, letting you build your own listing of known functions.

down:

http://www.idefense.com/iia/doDownload.php?downloadID=17

[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)

收藏
免费 1
支持
分享
最新回复 (6)
雪    币: 207
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
自己给自己加精的 人才   我顶
2005-12-18 22:16
0
雪    币: 67
活跃值: (66)
能力值: ( LV7,RANK:100 )
在线值:
发帖
回帖
粉丝
3
不知道支持那个ida版本
2005-12-18 22:37
0
雪    币: 255
活跃值: (207)
能力值: ( LV9,RANK:250 )
在线值:
发帖
回帖
粉丝
4
最初由 qq7119 发布
自己给自己加精的 人才 我顶

下载区不算加分的.加精应该是斑竹极力推荐
2005-12-19 09:21
0
雪    币: 390
活跃值: (707)
能力值: ( LV12,RANK:650 )
在线值:
发帖
回帖
粉丝
5
我做个补充:

目标程序的大小最好在500k以内。否则速度下降。
适用于各版本,但是IDA4.7/4.8有现成的dll,其他版本需要自己编译

来自:http://www.idefense.com/iia/releases/previews/IDACompare/

Typical target sizes this has
has been designed for is binaries around 500k in size.

You are welcome to try it on larger files, however performance may not
be ideal.

If you run IDA 4.7 or 4.8,
  precompiled binaries are directly available.
  
  If you do not use one of these versions, you will have to compile it
  yourself from the source which can be found in the "vc src" sub directory.
2005-12-19 12:40
0
雪    币: 329
活跃值: (343)
能力值: ( LV10,RANK:170 )
在线值:
发帖
回帖
粉丝
6
时间换空间,空间换时间。多数时候希望用空间换时间
2005-12-19 12:49
0
雪    币: 97697
活跃值: (200834)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
7
最初由 doskey 发布
时间换空间,空间换时间。多数时候希望用空间换时间


2005-12-19 18:55
0
游客
登录 | 注册 方可回帖
返回
//