Want to Join Us ?

you'll be able to discuss, share and send private messages.

Tool to analyze 64-bit binaries with 32-bit Hex-Rays Decompiler

Discussion in 'Plugins' started by computerline, Nov 15, 2014.

Share This Page

  1. computerline

    Well-Known Member Ida Pro Expert

    +22: x64 binary → x86 Hex-Rays
    Plus22 transforms x86_64 executables to be processed with 32-bit version of Hex-Rays Decompiler.

    This tool was created in mid-2013 for internal use in More Smoked Leet Chicken, and made public in November 2014 when Hex-Rays x64 finally came out.

    Usage
    php plus22.php [-va] {x64_binary.bin or listing.asm}​

    If file name ends with '.asm', it will be interpreted as an ASM listing.
    Otherwise, it will be interpreted as x64 ELF/PE, and disassembled with IDA.

    -v be verbose and leave all temporary files
    -a AutoNop all lines with errors


    You can use _misc\php.exe to run the script.

    Plus22 is designed to run in Windows environment, and works well under Wine.
    https://github.com/v0s/plus22
     
    roocoon, Nihilus, Rip Cord and 2 others like this.
Top