Topic created on: August 9, 2007 07:49 CDT by Faithless .

Some here may be interested in my first extension PyCommand script for the Immunity Debugger. funcdump.py allows a quick and clean report of the functions found within the loaded module. funcdump is designed to handle correctly those PE's which do not load at 0x00400000 in process address space.

I've realised it's handy having a window at the side recording all functions, and by simply highlighting and pressing Enter or double clicking the analyst can jump to the required function.

Installation simply involves copying the funcdump.py script into the PyCommands folder, and then issuing the !funcdump command within the debugger itself. I used this as an learning introduction to ID's Python API, and I look forward to seeing further extensions from this community.

-Rhys