OpenRCE

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Flag: Tornado! Hurricane!

File Information

Category	Open Source	# Downloads	Version
IDA Plugins	Yes	11,091	1.0

Download from OpenRCE
MD5 Sum: 93388E7D27123E4AED42D41958D948E8

Last updated on Jun 25, 2007 with the following description: Version 1.0 released on June 25, 2007.

Build system improvements:

* Compiled with Microsoft Visual C++ 2005, Debugging Tools SDK 6.7.5.0 and IDA Pro SDK 5.1
* Build a 32-bit and 64-bit version of the plugin
* Link with the static version of the libc library

Interface improvements:

* The plugin can be disabled with the -Opdb:off option on the command line
* The symbol path and options can be set in detpdb.cfg

Algorithm improvements:

* Support for 64-bit binaries (thanks to Matt Conover)
* Load the VC type library for all files with symbols
* Create structures for GUID variables
* Ignore leading underscores of GUID variables

Bugfixes:

* Apply multiple names at the same address in alphabetical order instead of randomly
* Fixed a refcount bug in the DbgHelp constructor
* Added a __cdecl specifier to the Sym::compare function used by qsort
* Fixed memory corruption bug due to lack of a copy constructor (thanks to Ilfak Guilfanov)
* Don't rely on wchar_t being 16 bits

Author Information

Username	Name	E-Mail	URL
asotirov	Alexander Sotirov	asotirovdeterminacom	http://www.determina.com/security.research/

Description This is a replacement for the IDA PDB plugin which significantly improves the analysis of Microsoft binaries with public debugging symbols. The distribution contains source code under a BSD license and a binary for IDA 5.0 and 5.1.

For more information see the Determina Security Research page and also the slides from Recon 2006.

Screenshot

There are 31,320 total registered users.

Recently Created Topics
[help] Unpacking VMP...	Mar/12
Reverse Engineering ...	Jul/06
hi!	Jul/01
let 'IDAPython' impo...	Sep/24
set 'IDAPython' as t...	Sep/24
GuessType return une...	Sep/20
About retrieving the...	Sep/07
How to find specific...	Aug/15
How to get data depe...	Jul/07
Identify RVA data in...	May/06

Recent Forum Posts
Finding the procedur...	rolEYder
Question about debbu...	rolEYder
Identify RVA data in...	sohlow
let 'IDAPython' impo...	sohlow
How to find specific...	hackgreti
Problem with ollydbg	sh3dow
How can I write olly...	sh3dow
New LoadMAP plugin v...	mefisto...
Intel pin in loaded ...	djnemo
OOP_RE tool available?	Bl4ckm4n

Recent Blog Entries
	halsten	Mar/14
Breaking IonCUBE VM
	oleavr	Oct/24
Anatomy of a code tracer
	hasherezade	Sep/24
IAT Patcher - new tool for ...
	oleavr	Aug/27
CryptoShark: code tracer ba...
	oleavr	Jun/25
Build a debugger in 5 minutes
More ...

Recent Blog Comments
	nieo on:	Mar/22
IAT Patcher - new tool for ...
	djnemo on:	Nov/17
Kernel debugger vs user mod...
	acel on:	Nov/14
Kernel debugger vs user mod...
	pedram on:	Dec/21
frida.github.io: scriptable...
	capadleman on:	Jun/19
Using NtCreateThreadEx for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit