googleba88693c99e7e8ce.html
tel. 22 813 10 29 email: biuro@gravsoft.pl
pon-pt w godz. 8-16

Gravsoft informatyka śledcza

Home Komponenty dla programistów › IDA

IDA

IDA

Hex-Rays nadal rozwijany i wspierany deasembler IDA.

To słynne narzędzie do analizy oprogramowania, które jest de facto standardem w branży zabezpieczeń oprogramowania, jest niezbędną pozycją w skrzynce narzędziowej każdego poważnego analityka oprogramowania. Hex-Rays utrzymuje w rozwoju  IDA i zapewnia jej ciągłą ewolucję.


We are pleased to present our flagship product, the Hex-Rays Decompiler, which brings binary software analysis within reach of millions of programmers. It converts executable programs into a human readable C-like pseudocode text.

In comparison to low level assembly language, high level language representation in Hex-Rays has several advantages:

  • concise: requires less time to read it
  • structured: program logic is more obvious
  • dynamic: variable names and types can be changed on the fly
  • familiar: no need to learn the assembly language
  • cool: the most advanced decompiler ever built!

The pseudocode text is generated on the fly. Our technology is fast enough to analyze 99% of functions within a couple of seconds.

Currently the decompiler supports compiler generated code for the x86, x64, and ARM processors. We plan to port it to other platforms and add a programmatic API. This will allow our customers to implement their own analysis methods. Vulnerability search, software validation, coverage analysis are the directions that immediately come to mind.

The decompiler runs on MS Windows, Linux, and Mac OS X. The GUI and text IDA versions are supported. In the text mode, only batch operation is available.

Decompiler output listing

Both archives contain a disassembly listing and a decompilation listing. Note the difference of the listing sizes and the readibility!

hexrays_listing.zip
malware_decompilation.zip

While the first archive contains automatic results, the second file has been improved using the interactive features of the decompiler.

Comparison pages

You can visit our comparison page to see side-by-side disassembler and decompiler outputs. A picture is worth a thousand words...

Initial comparison page (ARM)
Initial comparison page (x86)
Initial comparison page (x64)
Comparison page v1.0 -> v1.1 (x86)
Comparison page v1.1 -> v1.2 (x86)
Comparison page v1.2 -> v1.3
Comparison page v1.5 -> v1.6
Comparison page v1.6 -> v1.7

Short decompilation demo video


Hex-Rays Decompiler demo video

Thorough decompilation demo video


Hex-Rays Decompiler demo (almost a tutorial) video by
ccso.com

PDF files

Mailing list

There is a mailing list for public announcements about the decompiler.
To subscribe, click here.





  • Brak komentarzy
Podobne w tej kategorii