Tool

WPP Remover

WPP Remover is an IDA Pro plugin that removes Windows software-trace calls from Hex-Rays pseudocode. It activates for Windows PE files and replaces calls to WPP_SF functions with NOPs in a microcode pass.

Targets: Binary
Category: Native analysis tools
Relationship: Foundation tool
Sources reviewed: 2026-11-07

Stars: 58
Last commit: 2026-01-31
Language: Python
License (GitHub): GPL-3.0

GitHub data as of 2026-11-09

Copy as Markdown View JSON Cite

Requirements & limits

Install with hcli plugin install wpp-remover, or copy wpp_remover.py into the IDA plugins directory and restart IDA.
Toggle it from the decompiled view with Toggle WPP Remover.
The README does not name a license.

Cite

BibTeX

@misc{ida-wpp-remover,
  title = {{WPP Remover}},
  howpublished = {\url{https://github.com/L4ys/IDA-WPP-Remover}},
  url = {https://github.com/L4ys/IDA-WPP-Remover},
  urldate = {2026-11-07},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/ida-wpp-remover/}}
}

Plain text

WPP Remover. https://github.com/L4ys/IDA-WPP-Remover (accessed 2026-11-07). Awesome REA entry: https://awesomerea.org/resources/ida-wpp-remover/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

README.md GitHub · L4ys/IDA-WPP-Remover · Revision 386fb45

More in Native binaries

All 502 entries in Native binaries