WPP Remover is an IDA Pro plugin that removes Windows Performance Profiling (WPP) calls during decompilation, resulting in cleaner pseudocode for analysis.
- Removes WPP calls from Hex-Rays decompiler output
- Only activates for Windows PE files
Copy wpp_remover.py
to your IDA plugins directory (%IDADIR%\plugins
or %APPDATA%\Hex-Rays\IDA Pro\plugins
)
- Plugin activates automatically for Windows PE files
- Toggle on/off: Right-click in decompiled view → "Toggle WPP Remover"
It uses a Hex-Rays microcode optimization pass to find calls to WPP_SF*
functions and replace them with NOPs before pseudocode generation.