EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-01-2015, 03:36
sh3dow sh3dow is offline
Family
 
Join Date: Oct 2014
Posts: 81
Rept. Given: 87
Rept. Rcvd 76 Times in 21 Posts
Thanks Given: 131
Thanks Rcvd at 90 Times in 32 Posts
sh3dow Reputation: 76
[idaref] IDA Pro Instruction Reference Plugin

IDA Pro Full Instruction Reference Plugin - It's like auto-comments but useful.

I'm generally pretty good at figuring out what various Intel instructions do. But, once in a while I need to either know some precise detail (i.e. exact side effects of SUB) or come across a rare instruction. Then I break my train of thought and have to dig out the reference manual. Which got me thinking: Why can't IDA just give me the full documentation?
https://raw.githubusercontent.com/no...hot/idaref.png
The plugin will monitor the location for your cursor (ScreenEA) and display the full documentation of the instruction. At the moment it only supports x86-64, however adding support for other architectures is relatively easy.

Usage
Simply checkout or download the repository and make sure that the sqlite database file is in the same directory as the 'idaref' python script.
Execute the python script via File->Script File... or ALT+F7. This will open a new view in your IDA workspace. In this view is where the text will be displayed. Now click on the instruction you're curious about and within a second the documentation will populate the view.

Once loaded, the plugin can be turned off by closing the tab window. To control the output right-click on the tab window to get a menu:

*Update View - Load documentation for currectly selected instruction.
*Lookup Instruction - Manual load documentation, you'll be prompted for the instruction.
*Toggle Auto-refresh - Turn on/off auto loading of documentation and rely on the first two options.
https://raw.githubusercontent.com/no...daref_menu.png

https://github.com/nologic/idaref


by nologic
Reply With Quote
The Following 7 Users Gave Reputation+1 to sh3dow For This Useful Post:
alephz (01-01-2015), computerline (01-01-2015), emo (01-01-2015), Git (01-03-2015), MarcElBichon (01-01-2015), TechLord (01-13-2015), TQN (01-02-2015)
The Following 2 Users Say Thank You to sh3dow For This Useful Post:
sendersu (04-12-2015), zeytunak (04-12-2015)
  #2  
Old 01-01-2015, 08:42
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 855
Rept. Given: 496
Rept. Rcvd 1,154 Times in 308 Posts
Thanks Given: 92
Thanks Rcvd at 528 Times in 202 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
This might be a useful thing to implement in x64dbg too

Cheers!
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Gave Reputation+1 to mr.exodia For This Useful Post:
sh3dow (01-02-2015)
  #3  
Old 01-03-2015, 19:03
gigaman gigaman is offline
Friend
 
Join Date: Jun 2002
Posts: 84
Rept. Given: 0
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 7 Times in 6 Posts
gigaman Reputation: 4
Yep, this could be useful sometimes.
Doesn't work for VEX-encoded instructions (the database contains a common description for the "old" encoding only - i.e. just for MOVDQA, not for VMOVDQA), but the fix is quite simple (if instruction starts with V and isn't in the database, try to locate it without the prefix).
Reply With Quote
Reply

Tags
ida pro, ida pro plugin, reference

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[IDA Plugins]FRIEND: Flexible Register/Instruction Extender aNd Documentation sh3dow Source Code 1 11-24-2016 07:13
Instruction Size visu General Discussion 9 05-16-2005 18:23
Strange Instruction CTS BE thomasantony General Discussion 2 03-23-2005 04:41


All times are GMT +8. The time now is 06:21.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX