https://github.com/jeads-sec/etherannotate_ida

EtherAnnotate IDA Pro Plugin - Parse EtherAnnotate trace files and markup IDA disassemblies with runtime values
https://github.com/jeads-sec/etherannotate_ida

Last synced: 3 months ago
JSON representation

EtherAnnotate IDA Pro Plugin - Parse EtherAnnotate trace files and markup IDA disassemblies with runtime values

• Host: GitHub
• URL: https://github.com/jeads-sec/etherannotate_ida
• Owner: jeads-sec
• Created: 2010-05-04T16:15:29.000Z (over 14 years ago)
• Default Branch: master
• Last Pushed: 2010-05-04T20:27:03.000Z (over 14 years ago)
• Last Synced: 2024-02-12T15:55:01.347Z (9 months ago)
• Homepage:
• Size: 93.8 KB
• Stars: 12
• Watchers: 2
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README

Awesome Lists containing this project

README

        
EtherAnnotate IDA Pro Plugin

Parses the specialized instruction trace files that are generated using the EtherAnnotate Xen modification (http://github.com/inositle/etherannotate_xen).  From the instruction trace, register values and code coverage of the run-time information are visualized in IDA Pro through instruction comments and line colorations.

Note: The Visual Studio solution will most likely not work because it has not been generalized but if you follow the IDA Pro SDK help it should instruct you on how to build an IDA Pro plugin.

Usage: 

   1) Load the IDB or PE file that you want to analyze (unpacked version of executable if needed) into IDA Pro as usual.

   2) Select the EtherAnnotate plugin from IDA's menu and when the file browser window opens, select the trace file that was generated by EtherAnnotate Xen.

   3) The plugin will parse the trace file and annotate instructions found in the trace.