What are the options to decompile ARM (iOS) to Objective-C using IDA?
I've been looking into the REobjc module (https://github.com/duo-labs/idapython), but it can only handle x64 code.
Are there other plugins that may decompile the ARM?
2
-
Are you only looking for Objective-C output, and do you need it to be compilable? Or would you accept anything that resembles a higher-level language to make it easier to understand?– knowmalwareJan 3, 2019 at 1:12
-
@knownmalware - I would also accept pseudo-like C :)– ShuzhengJan 3, 2019 at 8:22
Add a comment
|
1 Answer
Hexrays sells a decompiler plugin for IDA Pro. If you have a supported (purchased or renewed within the last year) version of IDA Pro, then you can purchase one of the ARM decompiler plugins.
I have not tried the following, but have heard of them (so add a comment about how well it works if you do try one!)...
There's the opensource snowman decompiler. It has been around for a few years now. Its website says it supports ARM and is available for radare2, x64dbg, multiple versions of IDA Pro, and as a standalone application.
Another opensource one is RetDec. Looks like it was just released late last year, but is from a well regarded AV company (Avast) and supposedly has been in development and use privately for several years.
I've also heard of the commercial Hopper product, which specializes in macOS executables, but not sure how good the built-in decompiler is.
-
-
I'd try both of the free ones first (snowman and RetDec). The Hexrays decompiler is pretty good, but expensive. I also just heard that NSA is opensourcing a disassembler/decompiler at RSAConference in early March. Jan 5, 2019 at 4:31