Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TODO #2

Open
yqs112358 opened this issue Aug 19, 2023 · 0 comments
Open

TODO #2

yqs112358 opened this issue Aug 19, 2023 · 0 comments

Comments

@yqs112358
Copy link

作者原话:

BDSDevHelper.py IDA插件主文件(写这个的时候还不会分文件,希望有人帮忙分下,不然写着估计挺头疼)
DocsGen.py 这是生成结构体/enum信息markdown文档的工具,与helper中 export all til information 功能(在菜单中找,下同)配合使用
TilChangedReporter.py 这是生成比较猜测结果的工具,需要两个版本的导出结果,与export all size information 配合使用,只需运行即可,有UI提示框

可以做的事:

  1. helper适配LL3 Hook(我希望可以重构一下,但是苟一下也ok的)
  2. helper猜测结构size精确度还可以再提高一点,具体是这样的:
    现在不会判断 method(this + 48, xxx) 型的成员访问,但其实这是可以参考的!有个地方故意把这个过滤了(在正则表达式中,每个表达式我都写注释了,但我估计没人想看那种表达式)
  3. 根据构造函数调用者推断size,大致思路如下(伪代码法,汇编法自行考虑)
  • 过滤出所有构造函数(这个已经有实现)
  • 获取所有构造函数的xrefs信息以及调用者的hexrays反汇编结果
  • 写一个handler类去推断所有反汇编结果,先写一个简单的推断器,无法推断的输出,写handle,直到.......(先致敬你...啊)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant