Tool
HexRaysPyTools
IDAPython plugin for IDA Pro's Hex-Rays decompiler that helps rebuild structures and classes from pseudocode. Its structure builder collects the fields a variable accesses within one function or, with deep scan, across the functions it is passed to, marks virtual tables, resolves conflicting fields and finalizes a C declaration applied to every scanned variable; a Classes view edits classes and their virtual functions, and a graph shows how local types relate. Pseudocode helpers recast and rename across assignments and calls, propagate names, rewrite out-of-bounds pointers as CONTAINING_RECORD for a containing structure, edit function signatures, rename functions from assert strings and untangle if statements.
Requirements & limits
- No commits since 2020-02-15 and no releases; the tags ida_6_8 and ida_7_2 mark older code. The README states support for IDA Pro 7.x with Python 2 or 3 and says nothing about later IDA releases; it notes that IDA 7.4 added an official implementation of its structure cross-references (Shift+X), describes Guessing Allocation as a very raw feature and marks its API as under construction.
- Needs IDA Pro with the Hex-Rays decompiler. Installation copies HexRaysPyTools.py and the HexRaysPyTools directory into IDA's plugins folder; settings live in IDADIR\cfg\HexRaysPyTools.cfg, and by default the cross-references collected during decompilation are stored in the database (store_xrefs). It works on the analyst's own IDA databases and type libraries.
- The repository has no license file and GitHub detects no license, so it grants no explicit reuse terms. No REA connection is established, and nothing was installed or run for this review.
About this entry
- Type
- Tool
- Category
- Native analysis tools
- Relationship
- Foundation tool
- Targets
- Binary
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- readme.md GitHub · igogo-x86/HexRaysPyTools · Revision b8ebf75
- HexRaysPyTools/settings.py#L11 GitHub · igogo-x86/HexRaysPyTools · Revision b8ebf75
- HexRaysPyTools GitHub · igogo-x86/HexRaysPyTools · Revision b8ebf75
- https://github.com/igogo-x86/HexRaysPyTools/wiki/History/a83ae2746d63e55aa215ffb595642163101d5003
More in Native binaries
- CAPE Sandbox (CAPEv2) · Tool
- LuaDec · Tool
- xpcspy · Tool
- de4py · Tool
- Dwarf · Tool
- DownUnderCTF: masked-squares flag checker · Case study