It is currently Wed Feb 19, 2020 10:35 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 11 posts ] 
Author Message
 Post subject: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 12:26 am 
Offline
Enthusiast
Enthusiast
User avatar

Joined: Wed Feb 01, 2012 3:30 pm
Posts: 761
Location: Nottinghamshire UK
Hi to all

Came across this vid, showing pseudo code disassem in IDA pro (disassem a nasty trojan ) :twisted:

Looks pretty awesome, thought some might be interested.

Zebuddi. :)

http://www.ccso.com/files/hexraysdemo.swf

_________________
malleo, caput, bang. Ego, comprehendunt in tempore


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 11:01 am 
Offline
PureBasic Expert
PureBasic Expert

Joined: Wed Oct 29, 2003 4:35 pm
Posts: 10576
Location: Beyond the pale...
That is pretty cool. An awesome tool for those engaged in analyzing malware for sure.

_________________
I may look like a mule, but I'm not a complete ass.


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 2:54 pm 
Offline
Addict
Addict

Joined: Fri Apr 25, 2003 11:10 pm
Posts: 1217
that's impressive, but having visited IDA's website I get the impression that the decompiler is sold as an add-on to IDA,
about 1100+ USD for IDA and about 2000+ USD for the decompiler that's over 3000 USD.
I would like to have it but it's just a bit expensive.


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 7:03 pm 
Offline
Enthusiast
Enthusiast
User avatar

Joined: Wed Feb 01, 2012 3:30 pm
Posts: 761
Location: Nottinghamshire UK
@Jack yes it is :cry: no limited demo either to have a play around with. It would have been a nice learning curve and surely there would be a big enough user base to bring the price down to something reasonable.

Is their anything comparable !?

Zebuddi. :)

_________________
malleo, caput, bang. Ego, comprehendunt in tempore


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 7:30 pm 
Offline
Enthusiast
Enthusiast

Joined: Mon Aug 30, 2010 11:51 am
Posts: 101
There is a free version, isn't this enough?

https://www.hex-rays.com/products/ida/support/download_freeware.shtml


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 8:23 pm 
Offline
Enthusiast
Enthusiast
User avatar

Joined: Wed Feb 01, 2012 3:30 pm
Posts: 761
Location: Nottinghamshire UK
@PureGuy Already have it. Was mainly interested in the pseudo code decompiler :D

Zebuddi.

_________________
malleo, caput, bang. Ego, comprehendunt in tempore


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 9:58 pm 
Offline
Addict
Addict

Joined: Thu Nov 01, 2007 5:37 pm
Posts: 1981
Location: Germany
Zebuddi123 wrote:
Is their anything comparable !?
Probably the only really free alternative is OllyDbg.

_________________
If any of you native English speakers have any suggestions for the above text, please let me know (via PM). Thanks!


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Tue Feb 18, 2014 10:12 pm 
Offline
Enthusiast
Enthusiast
User avatar

Joined: Wed Feb 01, 2012 3:30 pm
Posts: 761
Location: Nottinghamshire UK
@c4s should have been clearer sorry, I was referring to the pseudo decompiler part! any disassembler which has this pseudo C type code decompiler. Would be a great tool for tinkering and learning.

The great thing about HEX-Rays pseudo decompiler it runs across Windows , Linux , OSX. I cant say i have ever come across this sort of thing in any disassembler i`ve looked at :cry:

Zebuddi. :)

_________________
malleo, caput, bang. Ego, comprehendunt in tempore


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Wed Feb 19, 2014 5:49 pm 
Offline
Addict
Addict
User avatar

Joined: Sat Aug 15, 2009 6:59 pm
Posts: 1252
I am not very impressed. The video shows only very easy to analyse code for which you dont need the decompiler.
That said i know decompiler are a very complicated matter and i never had one that worked well.

I can see this saving some time on API heavy code. But it doesnt look like a well made decompiler.


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Wed Feb 19, 2014 7:05 pm 
Offline
Enthusiast
Enthusiast

Joined: Fri Feb 24, 2006 9:40 am
Posts: 314
jack wrote:
that's impressive, but having visited IDA's website I get the impression that the decompiler is sold as an add-on to IDA,
about 1100+ USD for IDA and about 2000+ USD for the decompiler that's over 3000 USD.
I would like to have it but it's just a bit expensive.


I paid about 1900 € and had to prove that i am a commercial software developer to order it. They dont seem to sell that software to private people.

There isnt anything comparable or even better on the market.

Check the Zynamics add-on Binnavi : http://www.zynamics.com/binnavi.html


Top
 Profile  
Reply with quote  
 Post subject: Re: IDA Pro PseudeoCode disassembly vid very interesting
PostPosted: Wed Feb 19, 2014 10:39 pm 
Offline
Addict
Addict
User avatar

Joined: Wed Dec 22, 2004 4:12 pm
Posts: 2449
Location: Norway
Quite nice indeed:
https://www.hex-rays.com/products/decom ... mbly.shtml

_________________
I like logic, hence I dislike humans but love computers.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 11 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  

 


Powered by phpBB © 2008 phpBB Group
subSilver+ theme by Canver Software, sponsor Sanal Modifiye