IDA StrikeOut: A Hex-Rays decompiler plugin to patch the Ctree

Overview

Introduction

StrikeOut is an plugin for the Hex-Rays Decompiler. It allows you to delete (hide) statements from the AST, thus simplifying the pseudocode output. This is a useful scenario when you are dealing with lots of junk code or code that don't necessarily increase your understanding of the pseudocode.

Features:

  • Delete a statement and its children
  • Patch a statement (with NOP) and its children (x86 arch. only)
  • Persistence
  • Undo support
  • Patch code (in the disassembly) view with NOPs

Building

StrikeOut is uses idax and is built using ida-cmake.

There are release pre-built for MS Windows.

Use cases

  • Patching out the disassembly from the pseudocode window

  • Cleaning up ugly / 'useless' pseudocode lines

  • Manually cleaning opaque predicates from the pseudocode window

Cleaning opaque predicates

  • Patching the disassembly code with NOPs

NOP patchs

  • Moving disassembly lines up or down Move lines

Use at your own risk. This feature is experimental and does not properly relocate instructions. It only copies their bytes.

You might also like...
Patch Onimusha 3 to allow any screen resolution and configure inputs.
Patch Onimusha 3 to allow any screen resolution and configure inputs.

Onimusha3Patch Patch Onmimusha 3 to allow any screen resolution. Fix the Configure input menu (see Configure input patch directory). How to use Compil

Use DOS object files (OMF) as patch files

omfpatch - Use Intel/Microsoft .OBJ files as binary diffs Overview This tool makes it possible to use MASM / TASM / JWasm / nasm as tool to write patc

Patch for Sierra's PowerChess to run on newer Windows Versions 9x

What is it? I recently stumbled upon the following thread: https://sourceforge.net/p/dxwnd/discussion/general/thread/98dd46dfc6/?page=0 Some people we

A window manager for GNOME, with rounded corners patch
A window manager for GNOME, with rounded corners patch

Tested in gnome-shell 40.5, should works in gnome 40 and 41. integrate the blur effects with rounded corners.The source code can be found here. Issues

Diff Match Patch is a high-performance library in multiple languages that manipulates plain text.

The Diff Match and Patch libraries offer robust algorithms to perform the operations required for synchronizing plain text. Diff: Compare two blocks o

Patch for Titanfall 2 that helps prevent disconnects while the servers are being attacked by a DoS attack.

Titanfall2 DeltaBuf patch This patch for Titanfall 2 helps prevent disconnects while the servers are being attacked by a DoS attack. Disclaimer This i

Fork of junaburg's picom fork with a patch for rounded corners and shadows
Fork of junaburg's picom fork with a patch for rounded corners and shadows

picom new! : You'll now also find tryone's dual_kawase blur for the new backend, as well as rounded corners from sdhand if they are so desired, merged

List of Persian Colors and hex colors for CSS, SCSS, PHP, JS, Python, and Ruby.

Persian Colors (Iranian colors) List of Persian Colors and hex colors for CSS, SCSS, PHP, C++, QML, JS, Python, Ruby and CSharp. Persian colors Name H

A short and sweet hex dumper!

██████╗ ██████╗ ███╗ ███╗██████╗ ██╔═══██╗██╔══██╗████╗ ████║██╔══██╗ ██║ ██║██║ ██║██╔████╔██║██████╔╝ ██║▄▄ ██║██║ ██║██║╚██╔╝██║██╔═══

Comments
  • Suggestion, ability to remove instruction from AST in xrefs.

    Suggestion, ability to remove instruction from AST in xrefs.

    Hello, I'm using this plugin for a few weeks now, works great to remove useless stuff like exception handling variables that serve no purpose in analyzing. There is one thing that could help a lot though, and that's the ability to remove the instructions from xref window (or in a similar way). In my case, the assignments for v95 are completely useless and makes analyzing annoying, I'd love to see a batch instruction removal in the future. Thanks for your plugin!

    https://user-images.githubusercontent.com/12673334/183776373-c747e5be-233c-4799-92f1-b91ed0dfeb07.mp4

    t

    opened by Tonyx97 0
Releases(0.1.5alpha)
Owner
Elias Bachaalany
Author: Batchography, Practical Reverse Engineering, Antivirus Hacker's Handbook
Elias Bachaalany
Header only wrapper around Hex-Rays API in C++20.

HexSuite HexSuite is a header only wrapper around Hex-Rays API in C++20 designed to simplify the use of Hex-Rays and IDA APIs by modern C++ features.

Can Bölük 127 Dec 6, 2022
Interactive-hex-meshing - Source code for "Interactive All-Hex Meshing via Cuboid Decomposition [SIGGRAPH Asia 2021]".

Interactive All-Hex Meshing via Cuboid Decomposition Video demonstration This repository contains an interactive software to the PolyCube-based hex-me

Lingxiao Li 131 Dec 5, 2022
GreenLambert macOS IDA plugin to deobfuscate strings

Delambert An IDA plugin to deobfuscate strings from The Lamberts macOS malware sample af7c395426649c57e44eac0bb6c6a109ac649763065ff5b2b23db71839bac655

fG! 9 Mar 14, 2022
SleighCraft is a decoder based on ghidra's decompiler implementation.

SleighCraft is a decoder (or, linear disassembler) based on ghidra's decompiler implementation. Sleighcraft can be used in Rust or Python, with both high-level and low-level API.

PortalLab 236 Nov 6, 2022
Pure Data patch export to lv2 plugin using heavy compiler + dpf example

Pure Data patch export to lv2 plugin using heavy compiler + dpf example Work in progress - Takes an audio input and writes to a 0.5 seconds buffers. 4

Qwrtst 3 Dec 27, 2022
IDA Pro key checker tool

IDA Key Checker IDA Pro (6.x-7.x) key checker tool Usage A list of available options can be retrieved using: ida_key_checker --help Arguments: Option

null 58 Dec 26, 2022
Yet Another Ghidra Integration for IDA

Yagi Yet Another Ghidra Integration for IDA Overview Yagi intends to include the wonderful Ghidra decompiler into both IDA pro and IDA Free. ?? You ca

Airbus CERT 390 Dec 8, 2022
IDA Debugger Module to Dynamically Synchronize Memory and Registers with third-party Backends (Tenet, Unicorn, GDB, etc.)

IDA Debug Bridge IDA Debugger Module to Dynamically Synchronize Memory and Registers with third-party Backends (Tenet, Unicorn, GDB, etc.) By synchron

null 9 Sep 5, 2022
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

FREE Reverse Engineering Self-Study Course HERE Hacking Windows The book and code repo for the FREE Hacking Windows book by Kevin Thomas. FREE Book Do

Kevin Thomas 1.1k Dec 27, 2022
Quick patch to prevent fatal crashing when downloading title assets (boxart, etc) through FSD or Aurora.

Quick patch to prevent fatal crashing when downloading title assets (boxart, etc) through FSD or Aurora. As of v0.2-beta, this patch should work for everyone, regardless of geographic location (both in and outside of the US).

Stelio Kontos 27 Dec 11, 2022