Class Informer By Sirmabus

computerline

New member
Ida Pro Expert
I found the port to IDA7 on github, so I build it, could be use with IDA7, Qt5.6 (use the Qt5Core in PyQt5 package i already upload :)), hope it can be usefull with someone
 

Attachments

  • IDA_ClassInformer_PlugIn_IDA7_QT 5.6.7z
    244.4 KB · Views: 29

m4n0w4r

New member
I found the port to IDA7 on github, so I build it, could be use with IDA7, Qt5.6 (use the Qt5Core in PyQt5 package i already upload :)), hope it can be usefull with someone

Using your PyQT5 package, load test.py ok
Everything appears to be working!

Load other script (ex: hello_pyqt5.py) ...ok, like this:
Windows 10 x64-2018-02-01-21-11-23.png

But can not load the plugin:
LoadLibrary(C:\Program Files\IDA 7.0\plugins\IDA_ClassInformer_PlugIn.dll) error: The specified module could not be found.
C:\Program Files\IDA 7.0\plugins\IDA_ClassInformer_PlugIn.dll: can't load file

Regards,
 

computerline

New member
Ida Pro Expert
Using your PyQT5 package, load test.py ok

But can not load the plugin:

Regards,
Sorry for late repy, could you copy the dll file to the ida root directory, then use denpendency walker to load that dll, and show me the resuls. I build this dll with windows 10 10240 sdk, maybe it not compatible with your windows version.
 

computerline

New member
Ida Pro Expert
Yep, this version is not compatible with windows SDK, I'll try to rebuild.
I upload the release build :) You could try. You could active it on the on the context menu.

shotxv.png
 

Attachments

  • PlugClassInformer_IDA7_Release.7z
    191 KB · Views: 38
Last edited:

johnsmithx

New member
Hello,

It doesn't work on IDA Pro 7.0

Output:


>> Class Informer: v: 2.6, built: Jul 14 2018, By Sirmabus
Working..
** Failed to load the IDA TypeDescriptor type, generating one **


Processing C/C++ ctor & dtor tables..
-------------------------------------------------
7DD1AB20 I: "__initterm", 6 bytes.

7DD1AB20 processInitterm: "__initterm"
7DD1AB0A "__initterm" xref.
** arguments not located!

Processing time: 0.18 seconds.


Scanning for for RTTI Complete Object Locators..
-------------------------------------------------
N: "HEADER", A: 7DC30000 - 7DC31000, S: 4 KB.
N: ".data", A: 7DED5338 - 7DEE2000, S: 51.2 KB.
Total COL: 0
COL scan time: 0.013


Scanning for Virtual Function Tables..
-------------------------------------------------
N: "HEADER", A: 7DC30000 - 7DC31000, S: 4 KB.
N: ".data", A: 7DED5338 - 7DEE2000, S: 51.2 KB.
Vftable scan time: 0.006



=========== Stats ===========
RTTI vftables: 0
Processing time: 0.20 seconds
Done.

______

Tested on:
windows 10 x64
IDA pro 7.0 32bit

What is problem?
 

sendersu

Member
Pingback 3 years later...

General question: if we take for example IDA 7.7
do we still need to use ClassInformer plugin or that kind of feature is already bultin ito IDA itself?
 

Storm Shadow

Administrator
Staff member
Developer
Ida Pro Expert
Elite Cracker
Think you still have to use Classinformer, i cannot recal there is a build in function that does exactly the same
 

sendersu

Member
Thanks for reply! it is such a rare action these days....
but, do you have some good examples to compare std 7.7 output of IDA as well as CI one?
I was trying but did not find the diff...
so that's why I asked that question above

also I've found some forked project that does much more comparing to orig plugin, though was not able to test it out yet
 

sendersu

Member
@storm shadow
do you know if there are some ways to overcome IDA limit of 1024 bytes string size limit?
I'm asking about ver 7.7
I've recently hit a binary that has 2K+ mangled C++ symbol names in size.. (mostly due to lambdas that have very long auto-generated names in it)

PS
I've found these limitations in SDK7.7

/// Maximum length of a netnode name. WILL BE REMOVED IN THE FUTURE
const int MAXNAMESIZE = 512;
/// Maximum length of a name. We permit names up to 32KB-1 bytes.
const int MAX_NODENAME_SIZE = 32*1024;
/// Maximum length of strings or objects stored in a supval array element
const int MAXSPECSIZE = 1024;

I"m wondering how come the name is 32K but data is just 1K ???
it makes no sense at all to myself...
any ideas?
I wish we could have data 32K instead
 
Last edited:

Storm Shadow

Administrator
Staff member
Developer
Ida Pro Expert
Elite Cracker
I can check out the byte string limit.
I haven't noticed it before
 
Top