idawasm

These IDA Pro plugins add support for loading and disassembling WebAssembly modules.

Features:

• control flow reconstruction and graph mode
• code and data cross-references
• globals, function parameters, local variables, etc. can be renamed
• auto-comment hint support

recognizes WebAssembly modules

reconstructs control flow

parses and renders types

extracts code and data cross-references

detect function frame layout (for LLVM-compiled binaries)

Installation

git clone https://github.com/fireeye/idawasm.git

1. install the python module:
   python.exe setup.py install

2. manually install the WebAssembly file loader:
   mv loaders\wasm_loader.py %IDADIR%\loaders\wasm_loader.py

3. manually install the WebAssembly processor:
   mv procs\wasm_proc.py %IDADIR%\procs\wasm_proc.py

Whenever you update this project, you’ll need to update the python module, but shouldn’t have to touch the loader and processor files.

This plugin was developed against IDA 7.1 but probably works with IDA 7.0+.

Copyright (C) 2018 Willi Ballenthin

Source: https://github.com/fireeye/