IdaClu v1.1

Sub-plugin pack.

Bugfixes

general

• incorrect dummy prefix handling
• out of sync filters for post filter sub-plugins
• duplicate function prefixing with "user" and "plugin" separator symbols
• unable to pick and apply the "none" color
• broken prefix parsing resulting in out-of-bounds error (#2)

plugins

• out of sync label change for post-filter sub-plugins

compatibility

• broken filter state in IDA v6.x

Improvements

general

• user-defined prefix support
• exclusive prefix filtering UI-toggle (PREFIXES (E))
• prefix and folder usage counters
• enhanced function chunk handling

plugins

• add new Distinct Prefixes sub-plugin to Filter Analysis group
• add new Yara Rules group with Yara Match sub-plugin
• obfuscation detection sub-plugin set merged to Obfuscation Detection group (#1)
• add new Complex Arithmetic Expressions sub-plugin to Obfuscation Detection group
• add wrapper function detection feature to Xref Analysis/Xref Source sub-plugin
• add Windows API classification sub-plugins to Constant Analysis group

IdaClu v1.0

The first stable release.

Bugfixes

general

• missing table view update for functions labeled in recursive mode
• badly sanitized function name prefix delimiter (%) in main table view
• duplicate function prefixing in recursive mode
• duplicate function prefixing when prefix was applied more than once
• missing leading slash in folder labels
• wrong folder labeling for functions already labeled
• broken filter cleanup when removing labels

plugins

• broken progress bar for all sub-plugins with function post-filtering (SCRIPT_TYPE = 'custom')
• broken input field for Code Coverage/DRcov Coverage sub-plugin
• empty function list for Virtual Functions/Implicit Calls sub-plugin when type-casts enabled

compatibility

• empty widget labels in IDA v6.x
• broken color labeling tool in IDA v6.x
• broken sidebar position switch in IDA v6.x

Improvements

plugins

• comments with function call arguments for Virtual Functions/Implicit Calls sub-plugin
• refined output for Constant Analysis/Common Constants sub-plugin - avoiding addresses