Class Informer IDA plug-in
 Jim Lacy (Sirmabus) <jimlacy2003 yahoo com> |
Thursday, January 22 2009 03:42.28 CST |
My new IDA plug-in based on Igorsk's excellent article and IDC scripts.
[Download]
------------------------------------------------------------
Scans an MSVC 32bit target IDB for vftables with C++ RTTI, and MFC RTCI type data.
Places structure defs, names, labels, and comments to make more sense of class vftables ("Virtual Function Table") and make them read
easier as an aid to reverse engineering.
Creates a list window with found vftables for browsing.
RTTI ("Run-Time Type Identification"):
http://en.wikipedia.org/wiki/RTTI
RTCI ("Run Time Class Information") the MFC forerunner to "RTTI":
http://msdn.microsoft.com/en-us/library/fych0hw6(VS.80).aspx
------------------------------------------------------------
Example vftable output list:
.
.
Example vftable info set by plug-in:
.
.
Comments
 neoxfx |
Posted: Thursday, January 22 2009 04:22.52 CST |
| great work!, thanks for sharing to the community. | |
 camus |
Posted: Thursday, January 22 2009 06:55.11 CST |
| Very nice, thanks! | |
 RvaZero |
Posted: Monday, January 26 2009 02:12.19 CST |
| Very valuable. Thanks. | |
 Hendrix |
Posted: Friday, October 1 2010 15:41.31 CDT |
| Thank you, very helpful! | |
|
Sirmabus |
Posted: Tuesday, March 29 2011 05:20.19 CDT |
|
Thanks guys. I've done an update with some extra features and added exponential speedups by replacing string searching and processing with mostly binary methods. I made a section on my forums for my IDA plug-ins where you can download the updates: Sirmabus IDA plug-in forum |
|