idaxex 0.42b - ida91 support

Built for IDA 9.1.250226.

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built from source)

---

0.42 changes:

• 3rdparty: updated XbSymbolDatabase (0.42a)
• idaloader: updated to idasdk 9.1 (0.42b)
• idaloader: added xkelib.til, allowing more types to be added automatically (thanks to BoringTradesmen on /r/360hacks for making it) (0.42b)

0.41 changes:

• idaloader: allows writing patched data back to file via IDA Apply patches to input file option, should work for all XBE files, XEX must be both decompressed & decrypted for it to apply (Keypatch plugin allows patching both x86 & PPC asm)

0.40 changes:

• xex: named remainder of previously-unknown XAM exports (no more Refresh Refresh_1 exports)
• xbe: added loader for Xbox XBE executables, this will try naming library functions via XbSymbolDatabase & XTLID section data, and populate imports window with kernel imports
• xbe: support for retail/debug/beta/chihiro executables
• xbe: recrypts beta xbe headers as retail to let them work with XbSymbolDatabase (0.40b)
• xex: switched to ExCrypt AES code, may be slightly faster (0.40c)
• xex1tool: fixed issue with XEX2 signature validation (0.40c)

PDBs are unsupported with XBE files, as PDBs reflect the original EXE layout rather than the one in the XBE.
It might be possible for a tool to update PDB files to match with XBEs though (or ideally IDA would be able to do this itself since section names remain the same, but doesn't seem to have anything to handle that atm...)

idaxex 0.42a - ida90sp1 support

Built for IDA 9.0.241217 sp1 (sp0/beta not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built from source)

---

0.42 changes:

• idaloader: updated to idasdk 9.0sp1
• 3rdparty: updated XbSymbolDatabase (0.42a)

0.41 changes:

• idaloader: allows writing patched data back to file via IDA Apply patches to input file option, should work for all XBE files, XEX must be both decompressed & decrypted for it to apply (Keypatch plugin allows patching both x86 & PPC asm)

0.40 changes:

• xex: named remainder of previously-unknown XAM exports (no more Refresh Refresh_1 exports)
• xbe: added loader for Xbox XBE executables, this will try naming library functions via XbSymbolDatabase & XTLID section data, and populate imports window with kernel imports
• xbe: support for retail/debug/beta/chihiro executables
• xbe: recrypts beta xbe headers as retail to let them work with XbSymbolDatabase (0.40b)
• xex: switched to ExCrypt AES code, may be slightly faster (0.40c)
• xex1tool: fixed issue with XEX2 signature validation (0.40c)

Sadly IDAs PDB loader isn't currently compatible with XBEs, when image is converted from EXE -> XBE the section addresses get shifted around & aren't reflected in the PDB, causing IDA to use incorrect addresses for symbols.
(guess MSDIA likely allows section addrs inside loaded PDBs to be changed/ignored, seeing as Xbox SDK can debug XBE+PDB fine, but IDA doesn't seem to expose anything similar)

idaxex 0.41 - XBE/patch support

(old release, see https://github.com/emoose/idaxex/releases for latest)

Built for IDA 9.0.240925 rc1/release/sp0 (beta2 not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built from source)

---

0.41 changes:

• idaloader: allows writing patched data back to file via IDA Apply patches to input file option, should work for all XBE files, XEX must be both decompressed & decrypted for it to apply (Keypatch plugin allows patching both x86 & PPC asm)

0.40 changes:

• xex: named remainder of previously-unknown XAM exports (no more Refresh_1 Refresh_2)
• xbe: added loader for Xbox XBE executables, this will try naming library functions via XbSymbolDatabase & XTLID section data, and populate imports window with kernel imports
• xbe: support for retail/debug/beta/chihiro executables
• xbe: recrypts beta xbe headers as retail to let them work with XbSymbolDatabase (0.40b)
• xex: switched to ExCrypt AES code, may be slightly faster (0.40c)
• xex1tool: fixed issue with XEX2 signature validation (0.40c)

Sadly IDAs PDB loader isn't currently compatible with XBEs, when image is converted from EXE -> XBE the section addresses get shifted around & aren't reflected in the PDB, causing IDA to use incorrect addresses for symbols.
(guess MSDIA likely allows section addrs inside loaded PDBs to be changed/ignored, seeing as Xbox SDK can debug XBE+PDB fine, but IDA doesn't seem to expose anything similar - ideally it should probably be comparing sections inside PDB against the IDB segments & updating in-memory PDB to match automatically...)

idaxex 0.40c - Xbox XBE support

(old release, see https://github.com/emoose/idaxex/releases for latest)

Built for IDA 9.0.240925 rc1/release (beta2 not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built from source)

---

0.40 changes:

• xex: named remainder of previously-unknown XAM exports (no more Refresh_1 Refresh_2)
• xbe: added loader for Xbox XBE executables, this will try naming library functions via XbSymbolDatabase & XTLID section data, and populate imports window with kernel imports
• xbe: support for retail/debug/beta/chihiro executables
• xbe: recrypts beta xbe headers as retail to let them work with XbSymbolDatabase (0.40b)
• xex: switched to ExCrypt AES code, may be slightly faster (0.40c)
• xex1tool: fixed issue with XEX2 signature validation (0.40c)

Sadly IDAs PDB loader isn't currently compatible with XBEs, when image is converted from EXE -> XBE the section addresses get shifted around & aren't reflected in the PDB, causing IDA to use incorrect addresses for symbols.
(guess MSDIA likely allows section addrs inside loaded PDBs to be changed/ignored, seeing as Xbox SDK can debug XBE+PDB file, but IDA doesn't seem to expose anything similar - ideally it should probably be comparing sections inside PDB against the IDB segments & updating in-memory PDB to match automatically...)

idaxex 0.38b

Built for IDA 9.0.240925 rc1/release (beta2 not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built from source)

0.38b changes:

• simplified call to eh_parse, should fix "FFFFFFFFFFFFFFFF" popup message
• fixed XEX1 export loading
• fixed rare issue with callcap imports not being marked properly
• re-added pdata parser code to mark functions before calling eh_parse, allowing funcs to get analysed much sooner

0.37 changes:

• use IDA's (undocumented...) eh_parse plugin to handle .pdata & exception parsing, should now mark SEH exceptions in functions fine
• (for this it uses a hacked up version of eh_parse_t struct which could easily change in future, would be really nice if definition of that showed up in idasdk...)
• small plug, but you can now connect IDA up to xenia-canary with gdbstub branch: https://github.com/emoose/xenia/commits/canary-gdbstub/

0.36 changes:

• support building for Linux with clang & ida-cmake
• parse & name TLS directory/callbacks
• VA offset fixes for XEX3F/XEX0

0.35 changes:

• improved .pdata parsing, greatly reduces time taken to label .pdata functions
• savevmx/restvmx functions now named/hidden
• add fix for some XEX1 files that had segments such as .idata removed entirely from basefile
• use set_inf_main to mark EP like the IDA PE loader does, and call the set_import_* IDA funcs for imports
• (0.35a) updated x360.til with savefpr/savevmx prototypes to improve decompilation

0.34a changes:

• prompts to load PDB if the XEX contains debug info
• now passes codeview info from the XEX over to IDA, fixing "pdb incorrect or invalid" message if using matching PDB for the executable
• changing PDB_PROVIDER = PDB_PROVIDER_MSDIA inside pdb.cfg is recommended to fully load X360 symbols (though this is a lot slower than PDBIDA)

0.33 changes:

• IDA 9.0 support: changed bin_search3 -> bin_search to support IDA 9.0.240925

idaxex 0.37 - pdata / exceptions parsing

Built for IDA 9.0.240925 RC1/release (beta2 not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built for Linux from source)

0.37 changes:

• use IDA's (undocumented...) eh_parse plugin to handle .pdata & exception parsing, should now mark SEH exceptions in functions fine
• (for this it uses a hacked up version of eh_parse_t struct which could easily change in future, would be really nice if definition of that showed up in idasdk...)
• small plug, but you can now connect IDA up to xenia-canary with gdbstub branch: https://github.com/emoose/xenia/commits/canary-gdbstub/

0.36 changes:

• support building for Linux with clang & ida-cmake
• parse & name TLS directory/callbacks
• VA offset fixes for XEX3F/XEX0

0.35 changes:

• improved .pdata parsing, greatly reduces time taken to label .pdata functions
• savevmx/restvmx functions now named/hidden
• add fix for some XEX1 files that had segments such as .idata removed entirely from basefile
• use set_inf_main to mark EP like the IDA PE loader does, and call the set_import_* IDA funcs for imports
• (0.35a) updated x360.til with savefpr/savevmx prototypes to improve decompilation

0.34a changes:

• prompts to load PDB if the XEX contains debug info
• now passes codeview info from the XEX over to IDA, fixing "pdb incorrect or invalid" message if using matching PDB for the executable
• changing PDB_PROVIDER = PDB_PROVIDER_MSDIA inside pdb.cfg is recommended to fully load X360 symbols (though this is a lot slower than PDBIDA)

0.33 changes:

• IDA 9.0 support: changed bin_search3 -> bin_search to support IDA 9.0.240925

0.32 changes:

• hopefully fixed x360.til loading by delaying 32-bit switch until after XEX has loaded, should apply fine with hex-rays working, if you find anything wrong with it please let me know.

0.31 changes:

• added support for IDA 9.0.240807 beta
• savegpr/restgpr functions should be hidden from hex-rays now, making the decompilation a bit cleaner
• savefpr/restfpr functions now also named/hidden

idaxex 0.36 - Linux support

Built for IDA 9.0.240925 RC1/release (beta2 not supported)

Binary has been renamed from idaxex64.dll to idaxex.dll, make sure to remove the older version.

Linux build of idaxex is now included, tested on some recent distros and seems to work fine, not sure how compatible it'll be with everything though.
(xex1tool build currently isn't included, but can be built for Linux from source)

0.36 changes:

• support building for Linux with clang & ida-cmake
• parse & name TLS directory/callbacks
• VA offset fixes for XEX3F/XEX0

0.35 changes:

• improved .pdata parsing, greatly reduces time taken to label .pdata functions
• savevmx/restvmx functions now named/hidden
• add fix for some XEX1 files that had segments such as .idata removed entirely from basefile
• use set_inf_main to mark EP like the IDA PE loader does, and call the set_import_* IDA funcs for imports
• (0.35a) updated x360.til with savefpr/savevmx prototypes to improve decompilation

0.34a changes:

• prompts to load PDB if the XEX contains debug info
• now passes codeview info from the XEX over to IDA, fixing "pdb incorrect or invalid" message if using matching PDB for the executable
• changing PDB_PROVIDER = PDB_PROVIDER_MSDIA inside pdb.cfg is recommended to fully load X360 symbols (though this is a lot slower than PDBIDA)

0.33 changes:

• IDA 9.0 support: changed bin_search3 -> bin_search to support IDA 9.0.240925

0.32 changes:

• hopefully fixed x360.til loading by delaying 32-bit switch until after XEX has loaded, should apply fine with hex-rays working, if you find anything wrong with it please let me know.

0.31 changes:

• added support for IDA 9.0.240807 beta
• savegpr/restgpr functions should be hidden from hex-rays now, making the decompilation a bit cleaner
• savefpr/restfpr functions now also named/hidden

idaxex 0.35a - IDA 9.0 release

Built for IDA 9.0.240925 RC1/release (beta2 not supported)

0.35 changes:

• improved .pdata parsing, greatly reduces time taken to label .pdata functions
• savevmx/restvmx functions now named/hidden
• add fix for some XEX1 files that had segments removed entirely from basefile
• use set_inf_main to mark EP like the IDA PE loader does, and call the set_import_* IDA funcs for imports
• (0.35a) updated x360.til with savefpr/savevmx prototypes to improve decompilation

0.34a changes:

• prompts to load PDB if the XEX contains debug info
• now passes codeview info from the XEX over to IDA, fixing "pdb incorrect or invalid" message if using matching PDB for the executable
• changing PDB_PROVIDER = PDB_PROVIDER_MSDIA inside pdb.cfg is recommended to fully load X360 symbols (though this is a lot slower than PDBIDA)

0.33 changes:

• change bin_search3 -> bin_search to support IDA 9.0.240925

0.32 changes:

• hopefully fixed x360.til loading by delaying 32-bit switch until after XEX has loaded, should apply fine with hex-rays working, if you find anything wrong with it please let me know.

0.31 changes:

• added support for IDA 9.0.240807 beta
• savegpr/restgpr functions should be hidden from hex-rays now, making the decompilation a bit cleaner
• savefpr/restfpr functions now also named/hidden

idaxex 0.34a - IDA 9.0 release

Built for IDA 9.0.240925 RC1/release (beta2 not supported)

0.34a changes:

• prompts to load PDB if the XEX contains debug info
• now passes codeview info from the XEX over to IDA, fixing "pdb incorrect or invalid" message if using matching PDB for the executable
• changing PDB_PROVIDER = PDB_PROVIDER_MSDIA inside pdb.cfg is recommended to fully load X360 symbols (though this is a lot slower than PDBIDA)

0.33 changes:

• change bin_search3 -> bin_search to support IDA 9.0.240925

0.32 changes:

• hopefully fixed x360.til loading by delaying 32-bit switch until after XEX has loaded, should apply fine with hex-rays working, if you find anything wrong with it please let me know.

0.31 changes:

• added support for IDA 9.0.240807 beta
• savegpr/restgpr functions should be hidden from hex-rays now, making the decompilation a bit cleaner
• savefpr/restfpr functions now also named/hidden

idaxex 0.33 - IDA 9.0 release

Built for IDA 9.0.240925 (RC1 / release)

0.33 changes:

• change bin_search3 -> bin_search to support IDA 9.0.240925

0.32 changes:

• hopefully fixed x360.til loading by delaying 32-bit switch until after XEX has loaded, should apply fine with hex-rays working, if you find anything wrong with it please let me know.

0.31 changes:

• added support for IDA 9.0.240807 beta
• savegpr/restgpr functions should be hidden from hex-rays now, making the decompilation a bit cleaner
• savefpr/restfpr functions now also named/hidden