https://www.hex-rays.com/products/decompiler/

We are pleased to present our flagship product, the Hex-Rays Decompiler, which brings binary software analysis within reach of millions of programmers. It converts executable programs into a human readable C-like pseudocode text.

In comparison to low level assembly language, high level language representation in Hex-Rays has several advantages:

  • concise: requires less time to read it
  • structured: program logic is more obvious
  • dynamic: variable names and types can be changed on the fly
  • familiar: no need to learn the assembly language
  • cool: the most advanced decompiler ever built!

The pseudocode text is generated on the fly. Our technology is fast enough to analyze 99% of functions within a couple of seconds.

Currently the decompiler supports 32bit compiled generated code for the x86 and ARM processors. We plan to port it to other platforms and add a programmatic API. This will allow our customers to implement their own analysis methods. Vulnerability search, software validation, coverage analysis are the directions that immediately come to mind.

The decompiler runs on MS Windows. The GUI and text IDA versions are supported. In the text mode, only batch operation is available.

Limitations

The decompiler comes in two different flavors:

  • x86 decompiler (32-bit code)
  • ARM decompiler

Currently the decompiler can handle compiler generated code. Manually crafted code may be decompiled too but the results are usually worse than for compiler code. Support for other processors and 64-bit code will eventually be added (no deadlines are available, sorry).

Below are the most important limitations of our decompilers (all processors):

  • exception handling is not supported
  • type recovery is not performed
  • global program analysis is not performed

Limitations specific to x86:

  • 16-bit programs are not analyzed

Limitations specific to ARM:

  • floating point instructions are not supported
  • VFP/SIMD/Neon/... instructions are not supported
  • arguments passed partially on registers and partially on the stack are not supported

The Decompiler software is available for two platforms:

x86 and ARM.

IDA Starter is enough to use the decompiler.

最新文章

  1. Spring_的jar详细说明
  2. ifconfig 下面的一些字段(errors, dropped, overruns)
  3. Android Sqlite数据库相关——实现 Sqlite 数据库版本升级
  4. Android之SurfaceView
  5. [转]分布式文件系统FastDFS架构剖析
  6. mysql通过SOURCE导入SQL时报错处理
  7. Idea使用记录--添加Problems&&解决Autowired报错could not autowire
  8. chapter6 深入了解函数
  9. IO流输入 输出流 字符字节流
  10. 学生ID查询
  11. 10.QT-定时器
  12. ubuntu系统中Qt creator 编辑和应用使用中文输入法
  13. linux time 命令详解
  14. Django中请求的生命周期 和 FBV模式和CBV模式
  15. jQuery Ajax(异步改同步)
  16. SpringMVC+Maven开发项目源码详细介绍
  17. 洛谷 P1503 鬼子进村 解题报告
  18. 【原创】Javascript-显示系统时间
  19. tomcat 1)启动时不识别执行启动命令 2)启动报错 3)关闭不了,用myEclipse启动时显示jvm_bind,端口占用
  20. 用node写的一个后台框架

热门文章

  1. 数据库-mysql中文显示问题
  2. vue项目中,Iview打包到生产环境时, woff 字体引用问题
  3. HDU 3613 Best Reward(扩展KMP求前后缀回文串)
  4. Knockout.Js官网学习Demo(使用VS2012或者VS2013均可打开)
  5. Excel根据单元格内容设置整行颜色
  6. 何时调用getView?——从源码的角度给出解答
  7. day9--回顾
  8. PivotGridControl控件应用
  9. 009 HDFS的shell命令(里面有一个安全模式)
  10. TP5:使用了INPUT函数来接收参数了,还需再过滤SQL注入吗