Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/RolfRolles/HexRaysDeob
/ types & classes
Types & classes
21 in github.com/RolfRolles/HexRaysDeob
⨍
Functions
106
◇
Types & classes
21
Class
AllocaFixer
Finds calls to alloca in a function's decompilation microcode, and records the integer parameter from each call site.
AllocaFixer.cpp:25
Class
Blah
In order to optimize the jcc condition, we actually need a different structure than optinsn_t: in particular, we need a minsn_visitor_t. This local st
PatternDeobfuscate.cpp:627
Class
BlockInsnAssignNumberExtractor
This class is used to find all variables that have 32-bit numeric values assigned to them in the first block (as well as the values that are assigned
CFFlattenInfo.cpp:181
Class
CFFlattenInfo
CFFlattenInfo.hpp:15
Class
CFUnflattener
Unflattener.hpp:7
Class
DeferredGraphModifier
The "deferred graph modifier" records changes that the client wishes to make to a given graph, but does not apply them immediately. Weird things could
TargetUtil.hpp:12
Class
HandoffVarFinder
Protected functions might use either one, or two, variables for the switch dispatch number. If it uses two, one of them is the "update" variable, whos
CFFlattenInfo.cpp:202
Class
JZCollector
This class looks for jz/jg comparisons against constant values. For each thing being compared, we use a JZInfo structure to collect the number of time
CFFlattenInfo.cpp:80
Class
JZInfo
CFFlattenInfo.hpp:4
Class
JZMapper
Once we know which variable is the one used for comparisons, look for all jz instructions that compare a number against this variable. This then tells
CFFlattenInfo.cpp:256
Class
MicrocodeGraphContainer
MicrocodeExplorer.cpp:262
Class
MicrocodeInstructionGraph
MicrocodeExplorer.cpp:66
Class
MicrocodeInstructionGraphContainer
MicrocodeExplorer.cpp:166
Class
MovInfo
DefUtil.hpp:5
Class
ObfCompilerOptimizer
PatternDeobfuscate.hpp:4
Class
ObfCompilerOptimizer
Our pattern-based deobfuscation is implemented as an optinsn_t structure, which allows us to hook directly into the microcode generation phase and per
PatternDeobfuscate.cpp:9
Class
XorSimplifier
PatternDeobfuscateUtil.hpp:12
Class
mblock_dumper_t
MicrocodeExplorer.cpp:45
Class
mblock_qstring_dumper_t
MicrocodeExplorer.cpp:35
Class
mblock_virtual_dumper_t
MicrocodeExplorer.cpp:8
Class
sample_info_t
MicrocodeExplorer.cpp:55