mco_pivot_to_ida
Analyze a suspicious address from WinDbg or x64dbg in IDA Pro to get function name, decompiled pseudocode, callers, and callees.
Instructions
Take an address from WinDbg or x64dbg and analyze it in IDA Pro. Returns: function name, decompiled pseudocode, callers, callees. Use when you have a suspicious address from dynamic analysis.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Hex address, e.g. '0x7FF712340000' | |
| context | No | Optional context string (e.g. WinDbg output about this address) |