feat: Add 6.9 support, shallow and deep scanner

Author: igogo-x86

HexRaysPyTools.py

@@ -27,7 +27,8 @@ def hexrays_events_callback(*args):
             idaapi.attach_action_to_popup(form, popup, Actions.RecastItemLeft.name, None)
 
         if hx_view.item.get_lvar() and filter(lambda x: x.equals_to(hx_view.item.get_lvar().type()), Const.LEGAL_TYPES):
-            idaapi.attach_action_to_popup(form, popup, Actions.ScanVariable.name, None)
+            idaapi.attach_action_to_popup(form, popup, Actions.ShallowScanVariable.name, None)
+            idaapi.attach_action_to_popup(form, popup, Actions.DeepScanVariable.name, None)
             idaapi.attach_action_to_popup(form, popup, Actions.RecognizeShape.name, None)
 
         if item.citype == idaapi.VDI_FUNC:
@@ -158,7 +159,8 @@ def init():
         Actions.register(Actions.RemoveArgument)
         Actions.register(Actions.RemoveReturn)
         Actions.register(Actions.ConvertToUsercall)
-        Actions.register(Actions.ScanVariable, Helper.temporary_structure)
+        Actions.register(Actions.ShallowScanVariable, Helper.temporary_structure)
+        Actions.register(Actions.DeepScanVariable, Helper.temporary_structure)
         Actions.register(Actions.RecognizeShape)
         Actions.register(Actions.SelectContainingStructure, potential_negatives)
         Actions.register(Actions.ResetContainingStructure)
@@ -191,7 +193,8 @@ def term():
         Actions.unregister(Actions.RemoveArgument)
         Actions.unregister(Actions.RemoveReturn)
         Actions.unregister(Actions.ConvertToUsercall)
-        Actions.unregister(Actions.ScanVariable)
+        Actions.unregister(Actions.ShallowScanVariable)
+        Actions.unregister(Actions.DeepScanVariable)
         Actions.unregister(Actions.RecognizeShape)
         Actions.unregister(Actions.SelectContainingStructure)
         Actions.unregister(Actions.ResetContainingStructure)

HexRaysPyTools/Actions.py

@@ -256,12 +256,38 @@ def update(self, ctx):
         return idaapi.AST_DISABLE_FOR_FORM
 
 
-class ScanVariable(idaapi.action_handler_t):
+class ShallowScanVariable(idaapi.action_handler_t):
 
-    name = "my:ScanVariable"
+    name = "my:ShallowScanVariable"
     description = "Scan Variable"
     hotkey = "F"
 
+    def __init__(self, temporary_structure):
+        self.temporary_structure = temporary_structure
+        idaapi.action_handler_t.__init__(self)
+
+    def activate(self, ctx):
+        hx_view = idaapi.get_tform_vdui(ctx.form)
+        variable = hx_view.item.get_lvar()  # lvar_t
+        if variable and filter(lambda x: x.equals_to(variable.type()), Const.LEGAL_TYPES):
+            index = list(hx_view.cfunc.get_lvars()).index(variable)
+            scanner = ShallowSearchVisitor(hx_view.cfunc, self.temporary_structure.main_offset, index)
+            scanner.process()
+            for field in scanner.candidates:
+                self.temporary_structure.add_row(field)
+
+    def update(self, ctx):
+        if ctx.form_title[0:10] == "Pseudocode":
+            return idaapi.AST_ENABLE_FOR_FORM
+        return idaapi.AST_DISABLE_FOR_FORM
+
+
+class DeepScanVariable(idaapi.action_handler_t):
+
+    name = "my:DeepScanVariable"
+    description = "Deep Scan Variable"
+    hotkey = "shift+F"
+
     def __init__(self, temporary_structure):
         self.temporary_structure = temporary_structure
         idaapi.action_handler_t.__init__(self)

HexRaysPyTools/Core/Classes.py

@@ -3,7 +3,8 @@
 import HexRaysPyTools.Forms
 import Helper
 
-from PySide import QtGui, QtCore
+# from PySide import QtGui, QtCore
+from HexRaysPyTools.Cute import *
 
 all_virtual_functions = {}      # name    -> VirtualMethod
 all_virtual_tables = {}         # ordinal -> VirtualTable