首页
社区
课程
招聘
[转自EXETOOLS]IDA Plugin: Essense
发表于: 2004-9-29 17:39 5981

[转自EXETOOLS]IDA Plugin: Essense

2004-9-29 17:39
5981
http://www.sport-und-event.de/backtrace.de/plugins/essense.rar

Essense is IDA Pro plugin. It's main purpose is to save essense of IDA database to XML-storage. It's like 'Dump database to IDC' IDA command, but with some difference: essense is function-based (by default, plugin will save only user-modified functions). Next, plugin is like IDA signatures - try to save only 'valuable' instruction length, so essense is become position and file independent.

This can be useful, if you analysed some version of file and now try to load newer version. Or you analyse several files, which use same library/API. You can just save selected function from current database to XML-file (essense) and then just find and load them in new database.You will load almost everything:
* Structures used in this function
* Enums used in this function
* Frame of function
* Names, comments, etc...

Also, you will see a lot of bugs, of coz! :-)

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

收藏
免费 1
支持
分享
最新回复 (3)
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
居然是GPL的
不错的东东
支持一下先
2004-9-29 19:10
0
雪    币: 212
活跃值: (40)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
3
要重新编译呀!
2004-10-1 09:40
0
雪    币: 427
活跃值: (412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
* Structures used in this function
* Enums used in this function
* Frame of function
* Names, comments, etc...

看起来很高级啊,但从来没有这样看过汇编。算是大型汇编分析了
2004-10-1 09:49
0
游客
登录 | 注册 方可回帖
返回
//