-
-
[转帖]idaxex
-
发表于: 2020-12-17 09:47 3011
-
idaxex
idaxex is a native loader plugin for IDA Pro, adding support for loading in Xbox360 XEX executables.
Originally started as an IDAPython loader, work was continued as a native DLL to solve the shortcomings of it.
This should hopefully have the same features as xorloser's great Xex Loader (for IDA 6 and older), along with additional support for some early non-XEX2 formats, such as XEX1 used on beta-kits.
Features
Support for XEX2 (>= 186x), XEX1 (>= 1838), XEX% (>= 1746), XEX- (>= 1640) & XEX? (>= 1529) formats.
Can handle compressed/uncompressed images, and encrypted/decrypted (with support for retail, devkit & pre-release encryption keys)
Reads in imported functions & libraries into IDA's "imports" window, and also reads exports from the loaded module into the "exports" window.
(will automatically name imports that are well-known, such as imports from the kernel & XAM, just like xorloser's loader would)
PE sections are created & marked with the appropriate permissions as given by the PE headers.
Hardware-accelerated AES-NI support, should allow loading encrypted XEXs pretty fast!
4bcK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6W2L8h3!0G2M7$3g2Q4x3V1k6A6k6r3q4^5k6i4R3`.
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课