MCPcopy Create free account

hub / github.com/RolfRolles/HexRaysDeob / types & classes

Types & classes21 in github.com/RolfRolles/HexRaysDeob

ClassAllocaFixer
Finds calls to alloca in a function's decompilation microcode, and records the integer parameter from each call site.
AllocaFixer.cpp:25
ClassBlah
In order to optimize the jcc condition, we actually need a different structure than optinsn_t: in particular, we need a minsn_visitor_t. This local st
PatternDeobfuscate.cpp:627
ClassBlockInsnAssignNumberExtractor
This class is used to find all variables that have 32-bit numeric values assigned to them in the first block (as well as the values that are assigned
CFFlattenInfo.cpp:181
ClassCFFlattenInfo
CFFlattenInfo.hpp:15
ClassCFUnflattener
Unflattener.hpp:7
ClassDeferredGraphModifier
The "deferred graph modifier" records changes that the client wishes to make to a given graph, but does not apply them immediately. Weird things could
TargetUtil.hpp:12
ClassHandoffVarFinder
Protected functions might use either one, or two, variables for the switch dispatch number. If it uses two, one of them is the "update" variable, whos
CFFlattenInfo.cpp:202
ClassJZCollector
This class looks for jz/jg comparisons against constant values. For each thing being compared, we use a JZInfo structure to collect the number of time
CFFlattenInfo.cpp:80
ClassJZInfo
CFFlattenInfo.hpp:4
ClassJZMapper
Once we know which variable is the one used for comparisons, look for all jz instructions that compare a number against this variable. This then tells
CFFlattenInfo.cpp:256
ClassMicrocodeGraphContainer
MicrocodeExplorer.cpp:262
ClassMicrocodeInstructionGraph
MicrocodeExplorer.cpp:66
ClassMicrocodeInstructionGraphContainer
MicrocodeExplorer.cpp:166
ClassMovInfo
DefUtil.hpp:5
ClassObfCompilerOptimizer
PatternDeobfuscate.hpp:4
ClassObfCompilerOptimizer
Our pattern-based deobfuscation is implemented as an optinsn_t structure, which allows us to hook directly into the microcode generation phase and per
PatternDeobfuscate.cpp:9
ClassXorSimplifier
PatternDeobfuscateUtil.hpp:12
Classmblock_dumper_t
MicrocodeExplorer.cpp:45
Classmblock_qstring_dumper_t
MicrocodeExplorer.cpp:35
Classmblock_virtual_dumper_t
MicrocodeExplorer.cpp:8
Classsample_info_t
MicrocodeExplorer.cpp:55