首页 > 插件『IDA/OD/IMMDbg Plugin』 > hexrays_tools&CrowdDetox Rebuild for IDA 6.x

hexrays_tools&CrowdDetox Rebuild for IDA 6.x

structures_graph

Milan’s useful functions for Hex-Rays decompiler
================================================

New hexrays features:

Assist in creation of new structure definitions / virtual calls detection
===========================================================================

1) use “Reset pointer type” on all variables that you want to scan.

2) Select one of these variables and choose “Scan variable (S)”
Plugin deals with simple assignments “v1 = this;” automatically.

3) Again right click on such variable and choose open structure builder.
Ajdust the structure to your likings.

In Structure builder you can open a list of functions you scanned so far and
functions that were added from virtual function tables.

Open some of the functions and scan other variables that are of the same
type. Be carefull there is no undo yet.

As you gather more evidence structure builder will show you guessed substructure sizes
and guessed types.

Colliding types have yellow background. Use delete to solve the ambiguity.

With red colour is marked current master offset into structure being created.

Use “*” to change master offset. But you should not need this too often,
because basic situations are detected automatically.

下载地址
https://www.hex-rays.com/contests/2013/hexrays_tools.zip
演示
https://www.hex-rays.com/contests/2013/milan_videos.7z

重建版链接:

http://pan.baidu.com/share/link?shareid=2736195585&uk=3188888025

CrowdStrike CrowdDetox Plugin for Hex-Rays

CrowdDetox version 1.0.2 Beta
by Jason Geffner (jason@crowdstrike.com)

The CrowdDetox plugin for Hex-Rays automatically removes junk code and variables from Hex-Rays function decompilations.

下载地址
https://www.hex-rays.com/contests/2013/CrowdDetox.zip

原文链接
https://www.hex-rays.com/contests/2013/index.shtml

重建版链接:

http://pan.baidu.com/share/link?shareid=2746706555&uk=3188888025

原创文章,转载请注明: 转载自 火星信息安全研究院

本文标题: 《hexrays_tools&CrowdDetox Rebuild for IDA 6.x》

本文链接地址: http://www.h4ck.org.cn/2013/10/hexrays_toolscrowddetox-rebuild-for-ida-6-x/

  1. 堕花月 10月 13th, 2013 @ 02:02 | #-49

    大哥发个6.1编译版的吧,我机子上没有2012,tools要2012编译

    • obaby 10月 14th, 2013 @ 09:43 | #-48

      有个我构建的链接,你没看到么?

  2. John Rl 1月 29th, 2014 @ 02:05 | #-47

    This does not work with IDA 6.1. Any chance to support the 6.1 version?

    • obaby 2月 27th, 2014 @ 14:09 | #-46

      I have tested it with ida pro 6.1,will u plz post the error message here?

评论提交中, 请稍候...

留言

可以使用的标签: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>
Trackbacks & Pingbacks ( 0 )
  1. 还没有 trackbacks