首页
社区
课程
招聘
[转帖]Transplanting Hex-Rays Decompiler between IDA versions
发表于: 2020-11-18 16:34 3391

[转帖]Transplanting Hex-Rays Decompiler between IDA versions

2020-11-18 16:34
3391

Transplanting Hex-Rays Decompiler between IDA versions

DISCLAIMER: Apparently I cannot upload the patched binary and/or the original ones without having GitHub yell at me to take it down, so only binary diffs are provided.


Hex-Rays 7.2 for IDA 7.3

Made x64 decompiler (hexx64.dll) from IDA Pro 7.2 compatible with IDA Pro 7.3.


Hex-Rays 7.5 Demo for IDA 7.0/7.2/7.3

btw, I've also tried to port x64 decompiler (hexx64.dll) from IDA Demo 7.5 downwards. Guess what? I made it, and of course, without (most of) the demo limitations.


Switch Hex-Rays on the fly

Say you're using IDA 7.2 and you want to try the decompilers above, but you're unwilling to lose your ability of exporting a huge C file from your database. (Oh, one thing to mention: DO NOT install more than one version of decompilers for one architecture; bad things will happen.) Other than renaming plugin files and reopen the database each time you wish to switch your decompiler, you can also try this plugin I've wrote.


Download the decompiler above, and rename it to hexx64_7.5_7.x.bin. Then, put it into the IDA plugins folder, alongside with this plugin. Use Alt-F5 to toggle between versions.


NOTE: This plugin is utilizing a lot of "hacky" methods to achieve its goal, and I havn't tested it much. Due to technical limitations, here are some notes and don'ts while using this plugin:


Any pseudocode view opened by the decompiler will be closed by the plugin when a switch occurs, because otherwise it will crash IDA.

Any other plugin that is utilizing Hex-Rays SDK has a chance to cause IDA to crash when a switch occurs, except the ida_hexrays module in IDAPython environment.

Each time a unique version of decompiler is loaded, it will create an entry in "Edit"-"Plugins" menu. There is no known way to remove that entry. Clicking on the entry will force load that version of the decompiler back, and will cause some issues.

To sum it all up, use this plugin AT YOUR OWN RISK.


https://github.com/EZForever/Things/tree/master/hexrays#switch-hex-rays-on-the-fly


以前有,论坛备档。



[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)

最后于 2020-11-18 16:34 被linhanshi编辑 ,原因:
收藏
免费 2
支持
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回
//