retdec
retdec copied to clipboard
avast
RetDec is a retargetable machine-code decompiler based on LLVM.
The error occurred while unpacking the arm64 structured ELF file generated by this [project](https://github.com/NHAS/reverse_ssh). The error is: ``` $ retdec-unpacker rssh_linux_arm64 [UPX] Detected universal unpacking stub based on metadata. [UPX]...
1. When a pass fails, it would be nice to be able to exclude it and continue. It requires retdec to store some state on disk, such as the plan...
I was trying retdec's ability to rise from ARM64 to C. Firstly I wrote the following (most simple) assembly code `asmadd.s`: ```as .arch armv8-a .text .global asmadd .type asmadd, %function...
We have found several bugs in the LLVM semantics emitted by the capstone2llvmir tool. - [ ] For instructions using the carry flag, the overflow calculation is done after adding...
I found that there was an error in the parsing of the library function. The reason for the error was that retdec could not parse the jump from plt to...
Retdec version: `v4.0-438-gaecb4d08` Platform: `Ubuntu x64` Binary: `x64 ELF` Compiler: `GCC 9.4.0` Consider simple C++ program: ``` #include class A { public: int a; int b; A(int aparam, int bparam)...
The file I'm decompiling is kinda publicly available but I'm not sure how to share it with devs because the people who have written the code probably don't want it...
Being able to decompile old MS DOS/MZ programs would be nice.
after unzipped retdec-v3.2-windows-64b.zip from https://github.com/avast-tl/retdec/releases I run ``` O:\greensoft\retdec\bin>python3 retdec-archive-decompiler.py watc.dll ``` then I get ``` ##### Checking if file is a Mach-O Universal static library... ##### Checking if file...
I'm running my file with: `python C:\Users\Mendel\Downloads\Compressed\retdec-v4.0-windows-64b\retdec\bin\retdec-decompiler.py --backend-no-opts --fileinfo-verbose --backend-keep-library-funcs "C:\Program Files (x86)\path\to\exe\"`. But then it fails with: ``` -> converting function function_a8128c4f ( 81.93s ) -> converting function function_b7da8a44...
