IDAPatchExpression
Patch Expression Plugin lets you search for an expression in IDA and replace all bytes in the matches to the selected value (simple search/replace basically). It can help to NOP some repeating junk instructions and make the code easier to read (mainly in HexRays Decompiler output). Created with Windows PE files in mind, but might be useful in other applications too...
Installation
Just copy .py file to your IDA plugins directory
Usage
- (Optional) Select an expression you want to search for and press Alt+Shift+P (or invoke the plugin from the Search menu)
-
Selected bytes appears in the Expression box where you can edit them accordingly.
-
Edit boundaries or use provided buttons to set an area where you want to perform search and replace
-
Hit Go to replace all bytes in all matched expressions to the specified value
Changes are more prominent in the HexRays Decompiler output (situation before and after few simple replacements):
