Go Back   Exetools > General > Source Code


Thread Tools Display Modes
Old 08-31-2018, 15:47
TechLord TechLord is offline
Banned User
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 786
Rept. Given: 389
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 806
Thanks Rcvd at 2,056 Times in 596 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
HexRaysAST Matcher - PoC of Modifying HexRays AST

This is simple PoC that allows you to define AST pattern you want to process and make some actions with them

Current code contains templates for:
  • Replacing inlined strlen called on global variable
  • Auto renaming globals in expressions like global_var = func(arg1, "newglobalname")
  • Auto renaming structure fields like glob_str.f0 = sub_cafebabe to glob_str.sub_cafebabe = sub_cafebabe

Reply With Quote
The Following User Gave Reputation+1 to TechLord For This Useful Post:
progopis (09-08-2018)
The Following 3 Users Say Thank You to TechLord For This Useful Post:
Indigo (07-19-2019), Mendax47 (08-31-2018), p4r4d0x (08-31-2018)

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Highly self modifying code chants General Discussion 1 09-21-2016 17:46
Modifying Assembly Attributes (.NET) The Old Pirate General Discussion 7 05-11-2015 00:15
Modifying resources of self-checking exe c4p0ne General Discussion 8 09-17-2004 21:32

All times are GMT +8. The time now is 00:26.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2020 )