[OllyDbg 1.x] [转帖]Mapimp 1.0 by takerZ
2014-9-15 00:35 2551
Mapimp 1.0 by takerZ
This is an open source OllyDbg plugin which will help you to import map files exported by IDA or Dede. There are many plugins using which you can perform similar actions, but mapimp:
- Recognizes debugged file segments and applies names correctly
- Has an option to overwrite or skip names that intersect already defined
- Has a filter option which gives you great name demangling potential
The main idea is to apply series of masks to every single name loaded. Mask syntax goes.
Key "c" cuts the matched substring selected by regular expression.
name: System::__linkproc__ GetMem(int)
Key "s" skips the name if regular expression succeeds. It may be useful if you want to skip some dummy or incorrect names.
Key "r" replaces the substring selected by regular expression with your own.
As you can see slash character delims your substring from the regular expression. Use double slash to define slash as a character of your substring.
Remember that if the name met the mask condition it will be changed, then the second mask is applied to the changed name and so on. The order of mask applying is undefined so be careful, because some masks may intersect.
As about regular expressions, the plugin uses pcre library which syntax is compatible with perl regular expression. Check www.pcre.org for docs and sources.