Thanks for the comment. It’s certainly not a revolutionary tool by any means but I hate doing things manually that I can automate and I know the keyword highlighting, being able to execute other tools etc within one tool has been beneficial to me as a security code reviewer in the past.

Thanks for the two tools/links you posted as well. I’ve taken a quick look at those and your tool in particular I think is very interesting. If you are interested in working with me to include similar functionality in WPAA let me know because I think that kind of thing along with the existing functionality would be awesome for a code reviewer to have in one single tool!

SN

Pretty nice tool you’ve made there My normal workflow included the manual extraction of the XAP file, followed by loading the DLL files into IlSpy. Your tool greatly improves this unnecessary steps, well done!

Regarding code analysis, I want to add another good tool by Behrang Fouladi called XapSpy (http://www.sensepost.com/blog/6081.html). It allows you to monitor the called methods during the application’s runtime inside the WP Emulator. Unfortunately it only works with 32Bit Windows Versions because of the used libraries. It is also limited to the Emulator, as normal developer unlocked devices do not allow to attach a console or debugger to applications without source code.

I made myself a little extension to XapSpy called XapSpyAnalysis (http://xapspyanalysis.codeplex.com), which allows to graphically display the called methods over time. It’s not very pretty and still buggy, but its a starting point

Maybe you will find these two usefull.