Class Informer By Sirmabus

[hypnz]

Sorry man i just wanted to inform sirmabus

 

[computerline]

I found the port to IDA7 on github, so I build it, could be use with IDA7, Qt5.6 (use the Qt5Core in PyQt5 package i already upload ), hope it can be usefull with someone

 

[m4n0w4r]

I found the port to IDA7 on github, so I build it, could be use with IDA7, Qt5.6 (use the Qt5Core in PyQt5 package i already upload ), hope it can be usefull with someone

Using your PyQT5 package, load test.py ok

Everything appears to be working!

Load other script (ex: hello_pyqt5.py) ...ok, like this:


But can not load the plugin:

LoadLibrary(C:\Program Files\IDA 7.0\plugins\IDA_ClassInformer_PlugIn.dll) error: The specified module could not be found.
C:\Program Files\IDA 7.0\plugins\IDA_ClassInformer_PlugIn.dll: can't load file

Regards,

 

[computerline]

Using your PyQT5 package, load test.py ok

But can not load the plugin:

Regards,

Sorry for late repy, could you copy the dll file to the ida root directory, then use denpendency walker to load that dll, and show me the resuls. I build this dll with windows 10 10240 sdk, maybe it not compatible with your windows version.

 

[m4n0w4r]

Tks for your info .. Here is my result, on Win7 SP1

 

[computerline]

Yep, this version is not compatible with windows SDK, I'll try to rebuild.
I upload the release build You could try. You could active it on the on the context menu.

 

[m4n0w4r]

Yep, this version is not compatible with windows SDK, I'll try to rebuild.

Oh .. brother, i've just copied C:\Windows\System32\msvcp140d.dll from my Win10 VM to my Win7 and reload IDA .. now it's working lolz
I will test further and report if has bug



Regards,

 

[Sirmabus]

Finally got around to both updating to IDA 7.1 and/or putting them up on soureforge:
https://sourceforge.net/projects/classinformer/
https://sourceforge.net/u/sirmabus/profile/

 

[computerline]

Finally got around to both updating to IDA 7.1 and/or putting them up on soureforge:
https://sourceforge.net/projects/classinformer/
https://sourceforge.net/u/sirmabus/profile/

Thanks you, the result is very awesome

Binary for IDA 7.0

 

[johnsmithx]

Hello,

It doesn't work on IDA Pro 7.0

Output:


>> Class Informer: v: 2.6, built: Jul 14 2018, By Sirmabus
Working..
** Failed to load the IDA TypeDescriptor type, generating one **


Processing C/C++ ctor & dtor tables..
-------------------------------------------------
7DD1AB20 I: "__initterm", 6 bytes.

7DD1AB20 processInitterm: "__initterm"
7DD1AB0A "__initterm" xref.
** arguments not located!

Processing time: 0.18 seconds.


Scanning for for RTTI Complete Object Locators..
-------------------------------------------------
N: "HEADER", A: 7DC30000 - 7DC31000, S: 4 KB.
N: ".data", A: 7DED5338 - 7DEE2000, S: 51.2 KB.
Total COL: 0
COL scan time: 0.013


Scanning for Virtual Function Tables..
-------------------------------------------------
N: "HEADER", A: 7DC30000 - 7DC31000, S: 4 KB.
N: ".data", A: 7DED5338 - 7DEE2000, S: 51.2 KB.
Vftable scan time: 0.006



=========== Stats ===========
RTTI vftables: 0
Processing time: 0.20 seconds
Done.

______

Tested on:
windows 10 x64
IDA pro 7.0 32bit

What is problem?

 

[sendersu]

Pingback 3 years later...

General question: if we take for example IDA 7.7
do we still need to use ClassInformer plugin or that kind of feature is already bultin ito IDA itself?

 

[Storm Shadow]

Think you still have to use Classinformer, i cannot recal there is a build in function that does exactly the same

 

[sendersu]

Thanks for reply! it is such a rare action these days....
but, do you have some good examples to compare std 7.7 output of IDA as well as CI one?
I was trying but did not find the diff...
so that's why I asked that question above

also I've found some forked project that does much more comparing to orig plugin, though was not able to test it out yet

 

[sendersu]

@storm shadow
do you know if there are some ways to overcome IDA limit of 1024 bytes string size limit?
I'm asking about ver 7.7
I've recently hit a binary that has 2K+ mangled C++ symbol names in size.. (mostly due to lambdas that have very long auto-generated names in it)

PS
I've found these limitations in SDK7.7

/// Maximum length of a netnode name. WILL BE REMOVED IN THE FUTURE
const int MAXNAMESIZE = 512;
/// Maximum length of a name. We permit names up to 32KB-1 bytes.
const int MAX_NODENAME_SIZE = 32*1024;
/// Maximum length of strings or objects stored in a supval array element
const int MAXSPECSIZE = 1024;

I"m wondering how come the name is 32K but data is just 1K ???
it makes no sense at all to myself...
any ideas?
I wish we could have data 32K instead

 

[Storm Shadow]

I can check out the byte string limit.
I haven't noticed it before

 

[sendersu]

Hey! it's been a long...
how's going!

 

[Storm Shadow]

Going good, not so much activity .