×
  • Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
 

HexRaysCodeXplorer: make object-oriented RE easier

by Senior Malware Researcher at ESET on Nov 10, 2013

  • 1,385 views

HexRaysCodeXplorer - Hex-Rays Decompiler plugin for easier code navigation. Here are the main features of the plugin: ...

HexRaysCodeXplorer - Hex-Rays Decompiler plugin for easier code navigation. Here are the main features of the plugin:
- Automatic type REconstruction for C++ objects.
- C-tree graph visualization – a special tree-like structure representing a decompiled routine in c_itemt terms. Useful feature for understanding how the decompiler works.
- Navigation through virtual function calls in HexRays Pseudocode window.
- Object Explorer – useful interface for navigation through virtual tables (VTBL) structures.

In this presentation authors of HexRaysCodeXplorer will be discussing main functionality of the plugin and its application for reverse engineering. The authors will be presenting the algorithm for C++ type REconstruction. Also a special version of HexRaysCodeXplorer (ZeroNigths edition) will be released with new features developed specially for ZeroNights conference. New features will be committed GitHub from the stage

Statistics

Views

Total Views
1,385
Views on SlideShare
1,219
Embed Views
166

Actions

Likes
0
Downloads
20
Comments
0

2 Embeds 166

https://twitter.com 159
http://tweetedtimes.com 7

Accessibility

Categories

Upload Details

Uploaded via SlideShare as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
Post Comment
Edit your comment

HexRaysCodeXplorer: make object-oriented RE easier HexRaysCodeXplorer: make object-oriented RE easier Presentation Transcript