Skip to content

L4ys/IDA-WPP-Remover

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

WPP Remover - IDA Plugin for Removing WPP Calls

Overview

WPP Remover is an IDA Pro plugin that removes Windows Performance Profiling (WPP) calls during decompilation, resulting in cleaner pseudocode for analysis.

Features

  • Removes WPP calls from Hex-Rays decompiler output
  • Only activates for Windows PE files

Installation

Copy wpp_remover.py to your IDA plugins directory (%IDADIR%\plugins or %APPDATA%\Hex-Rays\IDA Pro\plugins)

Usage

  • Plugin activates automatically for Windows PE files
  • Toggle on/off: Right-click in decompiled view → "Toggle WPP Remover"

How it Works

It uses a Hex-Rays microcode optimization pass to find calls to WPP_SF* functions and replace them with NOPs before pseudocode generation.

About

Remove WPP calls from hexrays decompiled code

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages