I updated my IDA Pro plugins back in March here IDA Plugins. I made a post on the IDA forum IDA Pro fourm but forgot to note it here until now. Added a few new features to some like code and or data segment selectors, etc. The best thing I’ve removed most if not all […]

(Note: This is Windows-centric and 32bit only.) In a previous entry I talked about a problem getting the C++ “this” (ECX) pointer from sub-class type function hooks. Problem solved (credits to “Casual_Hacker”). One can simply use the seldom used __fastcall calling convention.