首页
社区
课程
招聘
[转自EXETOOLS]IDA Plugin: Essense
发表于: 2004-9-29 17:39 5980

[转自EXETOOLS]IDA Plugin: Essense

2004-9-29 17:39
5980
http://www.sport-und-event.de/backtrace.de/plugins/essense.rar

Essense is IDA Pro plugin. It's main purpose is to save essense of IDA database to XML-storage. It's like 'Dump database to IDC' IDA command, but with some difference: essense is function-based (by default, plugin will save only user-modified functions). Next, plugin is like IDA signatures - try to save only 'valuable' instruction length, so essense is become position and file independent.

This can be useful, if you analysed some version of file and now try to load newer version. Or you analyse several files, which use same library/API. You can just save selected function from current database to XML-file (essense) and then just find and load them in new database.You will load almost everything:
* Structures used in this function
* Enums used in this function
* Frame of function
* Names, comments, etc...

Also, you will see a lot of bugs, of coz! :-)

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 1
支持
分享
最新回复 (3)
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
居然是GPL的
不错的东东
支持一下先
2004-9-29 19:10
0
雪    币: 212
活跃值: (40)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
3
要重新编译呀!
2004-10-1 09:40
0
雪    币: 427
活跃值: (412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
* Structures used in this function
* Enums used in this function
* Frame of function
* Names, comments, etc...

看起来很高级啊,但从来没有这样看过汇编。算是大型汇编分析了
2004-10-1 09:49
0
游客
登录 | 注册 方可回帖
返回
//