Engines Configuration
JEB clients store the JEB engines configuration, also known as the back-end configuration, in the bin/jeb-engines.cfg. The configuration file is a key-value store where keys are fully-qualified identifiers that start with a leading dot.
This file contains general back-end settings as well as the settings of common plugins shipping with most distributions of JEB. Each plugin has its own sub-namespace (.PluginType) within the .parsers namespace. Keys pertaining to document rendering are stored in a sub-region named .text.
The public keys can safely be changed by a user. They are accessible in the Options dialog, Advanced mode, panel Engines. The engines configuration acts as a template for your projects' settings. Once a project is loaded, an additional tab named Project-Specific allows the user to modify the back-end settings of the project only, without changing the global back-end settings.
.CodelessSigsFolder#
Description: Folder containing codeless signature libraries
Type and Default: Path("$JEB_HOME/siglibs/codeless")
.CustomNotPrintableCharacterRanges#
Description: Ranges of characters that should be escaped, i.e. not considered printable (customization of Formatter.isPrintableChar). Formatted as a CSL of UTF-16 ranges: xxxx-xxxx,xxxx-xxxx,...
Type and Default: String("")
.CustomPrintableCharacterRanges#
Description: Ranges of characters that should be considered printable, i.e. not be escaped (customization of Formatter.isPrintableChar). Formatted as a CSL of UTF-16 ranges: xxxx-xxxx,xxxx-xxxx,...
Type and Default: String("")
.DatabaseBackupBeforeSave#
Description: Before saving a project to a JDB2 database, the current database is copied to the %TEMP% folder and will be used as backup in case any problem happen during saving.
Type and Default: Boolean(true)
.DevPluginClassnames#
Description: Classnames of your in-development plugin entry-point classes (they are not JARs)
Type and Default: String("")
.DevPluginClasspath#
Description: Classpath for your in-development plugins (they are not JARs)
Type and Default: String("")
.FlattenStringsInCodeDocuments#
Description: This global setting instructs code document generators (e.g., generating assembly or source code) to 'flatten' the strings before rendering. This means that all code tokens will be partially escaped as a means to ensure proper rendering of obfuscated names, regardless of the typeface or system in-use.
Type and Default: Boolean(false)
.LoadJavaScriptPlugins#
Description: Specify whether or not JEB back-end script plugins written in Java are allowed and should be loaded. When this option is enabled, Java script plugins located in the plugins folder 'scripts' subdirectory (typically, coreplugins/scripts) can be loaded and instantiated by back-end components.
Type and Default: Boolean(true)
.LoadPythonPlugins#
Description: Specify whether or not JEB back-end script plugins written in Python are allowed and should be loaded. When this option is enabled, Python script plugins located in the plugins folder 'scripts' subdirectory (typically, coreplugins/scripts) can be loaded and instantiated by back-end components.
Type and Default: Boolean(false)
.NetworkProxy#
Description: Proxy settings for JEB back-end components. The format of this property is:
'type|hostname|port|user|pass|whitelist'
-
type can be direct (no proxy), http, or socks
-
hostname and port are mandatory for non-direct proxy types
-
user and password are optional (needed only if your proxy requires authentication)
-
whitelist is an optional list of domains/IPs (with support for the wildcard character *) for which no proxy connection should be used (always direct connect)
Type and Default: String("")
.PluginsFolder#
Description: Location of the JEB back-end plugins folder
Type and Default: String("$JEB_HOME/coreplugins")
.SiglibsFolder#
Description: Folder containing native code signature libraries
Type and Default: Path("$JEB_HOME/siglibs")
.TypelibsFolder#
Description: Folder containing native type libraries
Type and Default: Path("$JEB_HOME/typelibs")
.parsers.EnforceVersionChecks#
Description: Verify and enforce plugins requirements. E.g. if enabled, a plugin requiring JEB version 2.3.10 to 3.0.7 will not be loaded if JEB is older than 2.3.10 or newer than 3.0.7
Type and Default: Boolean(true)
.parsers.apk.AndroidJavadocRoot#
Description: Location of Java and Android API documentation files. By default, local files stored in the Android SDK folder will be preferred over web-based API doc
Type and Default: String("($ANDROID_HOME/docs|$ANDROID_SDK_HOME/docs|$ANDROID_SDK_ROOT/docs)/reference/;https://developer.android.com/reference/;($JAVA_HOME)/docs/api")
.parsers.apk.ArscRestructuringMode#
Description: Restructuring mode for decoded resource files. This option permits the deobfuscation of obfuscated arsc entries.
Type and Default: Selection(3){None(0), Basic(1), Move(2), Move and Rename(3)}
.parsers.apk.DisableAssetsProcessingThreshold#
Description: The plugin will suggest disabling the auto-processing of APK assets if the number of asset files exceed that threshold (0 to disable)
Type and Default: Integer(300){0+}
.parsers.apk.DisableResourcesProcessingThreshold#
Description: The plugin will suggest disabling the auto-processing of APK resources if the number of resource files exceed that threshold (0 to disable)
Type and Default: Integer(500){0+}
.parsers.apk.FrameworksDirectory#
Description: Directory containing additional frameworks. Leave empty to use the default, which is the ".jeb-android-frameworks" directory in the Home folder
Type and Default: Path("")
.parsers.apk.GenerateAapt2Output#
Description: Generate an additional text fragment that will describe the APK resources similarly to AAPT2's output
Type and Default: Boolean(false)
.parsers.apk.MergeMultiDex#
Description: Merge the DEX files of a multi-DEX APK into a single, unified DEX unit
Type and Default: Boolean(true)
.parsers.apk.ProcessAssets#
Description: Process unstructured resources stored in the APK's assets/ directory
Type and Default: Boolean(true)
.parsers.apk.ProcessBytecode#
Description: Process the Dalvik bytecode (classes[N].dex)
Type and Default: Boolean(true)
.parsers.apk.ProcessCertificates#
Description: Process the APK's certificates data (legacy, v1, v2, v3)
Type and Default: Boolean(true)
.parsers.apk.ProcessLibraries#
Description: Process native code (.so) libraries stored in the APK's lib/ directory
Type and Default: Boolean(true)
.parsers.apk.ProcessManifest#
Description: Decode and process the APK Manifest
Type and Default: Boolean(true)
.parsers.apk.ProcessResources#
Description: Decode and process the Resources (if this option is true, the Manifest is always processed)
Type and Default: Boolean(true)
.parsers.crx.ProcessEntriesLazily#
Description: If enabled, the zipped entries in the CRX will only be processed when required (i.e. when requested by the user)
Type and Default: Boolean(false)
.parsers.dbug_apk.AlternateToolNames#
Description: CSV list of preferred (alternate) tool names. Currently, the only alternate supported is for `su`. Example: set this property to 'su=foo' to let JEB execute `foo` instead of `su` when root commands are attempted.
Type and Default: String("")
.parsers.dbug_apk.AttachPortRangeSize#
Description: Number of ports to try after the preferred port if the preferred port is in useby another program
Type and Default: Integer(20){1-100}
.parsers.dbug_apk.AttachPortRangeStart#
Description: Preferred TCP port to use and listen to when attaching to the JDWP debugger
Type and Default: Integer(8900){1024-65535}
.parsers.dbug_apk.BlockingQueryTimeoutSeconds#
Description: Maximum time in seconds to wait for a response from the debugger server
Type and Default: Integer(15){0+}
.parsers.dbug_apk.NativeAttachPortRangeSize#
Description: Number of ports to try after the preferred port if the preferred port is in useby another program
Type and Default: Integer(20){1-100}
.parsers.dbug_apk.NativeAttachPortRangeStart#
Description: Preferred TCP port to use and listen to when attaching to the native debugger
Type and Default: Integer(8950){1024-65535}
.parsers.dbug_apk.PreferLldbserver#
Description: Prefer the use of LLDB server over GDB server for debugging native Android code.
Type and Default: Boolean(true)
.parsers.dbug_apk.PreferredGdbserverVersion#
Description: Preferred GDB server version to use. JEB does not ship with all versions of GDB server for all platforms. Currently supported: '7.7' (x86, mips) '7.11' (arm), '8.3' (x86, arm). Leave blank to use the default.
Type and Default: String("")
.parsers.dbug_apk.PreferredLldbserverVersion#
Description: Preferred LLDB server version to use. JEB does not ship with all versions of LLDB server for all platforms. Currently supported: '3.1', '17.0.2' (experimental, Android NDK 26.1). Leave blank to use the default.
Type and Default: String("")
.parsers.dbug_elf.BlockingQueryTimeoutSeconds#
Description: Maximum time in seconds to wait for a response from the debugger server
Type and Default: Integer(15){0+}
.parsers.dcmp_dex.AggressiveCodeCleanup#
Description: This setting can be used by deobfuscator optimizers (unsafe) to determine what amount of code deemed 'useless' they may be allowed to clean-up
Type and Default: Selection(1){Disabled(0), Limited(1), Maximal(2)}
.parsers.dcmp_dex.DecompileTopLevelContainerClass#
Description: When requesting a decompilation at a particular location A, determine the top-level non-inner class at A, and decompile that class and all its constituents (methods, inners, etc.).
If this option is disabled, precise decompilation will be performed: the requested address will not be reinterpreted, and only the target object will be decompiled. Example: decompiling while on a method F's bytecode will decompile F and F only (not its container class, not its inners, etc.).
Type and Default: Boolean(true)
.parsers.dcmp_dex.DecompilerThreadCount#
Description: A hint of the count of threads used for concurrent decompilations (the default is 0, a special value that means 'half of the system's number of logical processors'; the special value -1 means 'all logical processors'; the value 1 can be used to disable concurrent decompilations entirely)
Type and Default: Integer(0)
.parsers.dcmp_dex.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1), Enabled, no static-reads(2)}
.parsers.dcmp_dex.DeferredRequestsCap#
Description: Limit the amount of deferred decompilation requests (-1 means no limit). Usually, deferred requests are for methods or classes related to the original request, but not part of it. Deferred requests are issued by some optimizers to generate better code.
Type and Default: Integer(400)
.parsers.dcmp_dex.DisplayASTElementStackOnHover#
Description: Display the parent and ancestors of a decompiled Java AST node when the mouse cursor hovers over it (useful to debug or troubleshoot a script)
Type and Default: Boolean(true)
.parsers.dcmp_dex.DisplayMethodInternalsAsComment#
Description: When rendering source, prepend method internals as a comment block before rendering the method
Type and Default: Selection(0){None(0), Signature(1), Signature, AST(2)}
.parsers.dcmp_dex.DisplayPrivateMethodsLast#
Description: Output private methods last (after public, default and protected methods)
Type and Default: Boolean(false)
.parsers.dcmp_dex.DoNotGenerateThisIfPossible#
Description: When no naming conflict is detected, avoid generating the 'this' prefix when accessing objects' attributes or invoking objects' methods
Type and Default: Boolean(false)
.parsers.dcmp_dex.EmulatorConfigPath#
Description: Path to the emulator configuration file. If the path is relative, the configuration file will be searched in JEB's plugins directory (usually, coreplugins/).
Type and Default: String("dexdec-emu.cfg")
.parsers.dcmp_dex.EnableCFUnflattener#
Description: Enable control-flow unflattening. The obfuscators must be enabled.
Type and Default: Boolean(true)
.parsers.dcmp_dex.EnableCacheForStringDecryption#
Description: The emulation cache is used to store and reuse the results of select, previously emulated invocations.
It works using heuristics, and is theoretically unsafe (a cached entry may be incorrect).
In the general case, it is relatively safe to use and should speed up emulation results.
If problems show up on a specific file/method, disable it and attempt a redecompilation.
Type and Default: Boolean(true)
.parsers.dcmp_dex.EnableDeobfuscatorOptimizers#
Description: Deobfuscator optimizers can generate code radically different than the underlying bytecode. Some are safe, some are unsafe. This setting is used by IR optimizers only.
Type and Default: Boolean(true)
.parsers.dcmp_dex.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.dcmp_dex.EnableUnsafeOptimizers#
Description: Unsafe optimizers are aggressive optimizers that may change the resulting code more than necessary. This setting is used by IR and AST master optimizers.
Type and Default: Boolean(true)
.parsers.dcmp_dex.EnableUnvirtualizer#
Description: Enable unvirtualization of methods and classes protected by a VM. The obfuscators must be enabled, and your license must support this option.
Type and Default: Boolean(true)
.parsers.dcmp_dex.GenerateAnnotations#
Description: Generate Java annotations
Type and Default: Boolean(true)
.parsers.dcmp_dex.GenerateLambdas#
Description: Favor the generation of lambda functions (Java 8+) if possible. Lambdas must have been reconstructed (engines option)
Type and Default: Boolean(true)
.parsers.dcmp_dex.GenerateOverrideAnnotations#
Description: Geneate additional @Override annotations for methods for which super implementations or definitions were found
Type and Default: Boolean(true)
.parsers.dcmp_dex.GenerateSyntheticFields#
Description: Explicitly generate synthetic fields
Type and Default: Boolean(false)
.parsers.dcmp_dex.GenerateSyntheticMethods#
Description: Explicitly generate synthetic methods
Type and Default: Boolean(false)
.parsers.dcmp_dex.IdentifierNamingStrategy#
Description: Naming strategy for the identifiers
Type and Default: Selection(0){Register-based(0), Type-based(1)}
.parsers.dcmp_dex.InsertBlankLinesAfterCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.dcmp_dex.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.dcmp_dex.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.dcmp_dex.ParseDebugInformation#
Description: Process debug information. If enabled, debug names can be used to name identifiers.
Proceed with caution! Dex metadata is not reliable, it can be forged and/or obfuscated to mislead analysis.
Type and Default: Boolean(true)
.parsers.dcmp_dex.ParseExceptionBlocks#
Description: Parse exception blocks
Type and Default: Boolean(true)
.parsers.dcmp_dex.ResolveFieldAccessTargets#
Description: Resolve accesses to object and class fields
Type and Default: Boolean(true)
.parsers.dcmp_dex.ResolveMethodCallTargets#
Description: Resolve calls to virtual and static methods, possibly offering a list of candidates methods to client code
Type and Default: Boolean(true)
.parsers.dcmp_dex.SortItemsForRendering#
Description: Sort class, field and method source items before rendering them
Type and Default: Selection(1){None(0), Alpha, Access(1)}
.parsers.dcmp_dex.SplitCallArgThreshold#
Description: Split a method invocation's arguments on single-lines, with parameter details, for methods with more than that number of parameters (does not apply to lambdas). Use 0 to disable splitting.
Type and Default: Integer(10)
.parsers.dcmp_dex.UseDebugInfoNames#
Description: Use names located in dex debug information (if available)
Type and Default: Boolean(true)
.parsers.dex.AndroidJavadocRoot#
Description: Location of Java/Android API documentation files; by default, local files stored in your Android SDK folder will be preferred over web-based API doc
Type and Default: String("($ANDROID_HOME/docs|$ANDROID_SDK_HOME/docs|$ANDROID_SDK_ROOT/docs)/reference/;https://developer.android.com/reference/;($JAVA_HOME)/docs/api")
.parsers.dex.CIDBMethodCountThresholdNoRegen#
Description: Threshold used by the context-information provider to determine whether an addition to the CIDB should trigger an update of the graph of methods and fields. If the dex unit has more than this method count, the provider will not regenerate the CI/CS or SEF determinations. Leave negative to use the default value (~10000).
Type and Default: Integer(-1)
.parsers.dex.CallgraphGenerationTimeout#
Description: Timeout (in seconds) used by the callgraph builder. Special values: -1 means no time-out (take as long as needed); 0 means a time-out proportional to the dex size, with a cap.
Type and Default: Integer(0)
.parsers.dex.ClassSeparatorLength#
Description: Length of the class separator line in characters
Type and Default: Integer(0){0+}
.parsers.dex.DalvikParserMode#
Description: The parser mode can be either legacy, art, dex38, dex39, or latest
Type and Default: Selection(50){Legacy(0), ART(50), dex 38(100), dex 39(110), dex 40(120), dex 41(130), Latest(1000)}
.parsers.dex.GenerateCatchDirectivesAtMethodEnd#
Description: Generate .catch/.catchall directives at the EOM instead of after a try-block
Type and Default: Boolean(false)
.parsers.dex.JarLibraryClasspath#
Description: A classpath containing Java classfiles to be used along with the dex-defined types. Refer to JarLibraryEnabled.
If non-empty, this classpath takes precedence over JarLibraryFolder.
Type and Default: String("")
.parsers.dex.JarLibraryEnabled#
Description: Enable external Java library file parsing. This feature can be used for finer type resolution.
To activate, enable this property and set either one of JarLibraryClasspath or JarLibraryFolder property.
Type and Default: Boolean(true)
.parsers.dex.JarLibraryFolder#
Description: A folder containing Jar library files to be used along with the dex-defined types. Refer to JarLibraryEnabled.
The default value (empty) means to use the folder ~/.jeb-android-libraries, which always contains a recent copy of the Android framework (android.jar). You may change the value to point to another folder, or drop additional jars in this folder.Note that JarLibraryClasspath takes precedence over this value.
Type and Default: String("")
.parsers.dex.MethodSeparatorLength#
Description: Length of the method separator line in characters
Type and Default: Integer(0){0+}
.parsers.dex.ParseExtendedOpcodes#
Description: Support parsing for the extended opcodes
Type and Default: Boolean(true)
.parsers.dex.ParseOptimizedOpcodes#
Description: Support parsing for the optimized opcodes
Type and Default: Boolean(true)
.parsers.dex.PreferredBaseForIntegers#
Description: Select the preferred base for rendering. Regardless of this selection, the base to render literals can be overridden by the user on a discrationary basis. This option is also used by dexdec when rendering decompiled Java source.
Type and Default: Selection(0){Auto(0), Octal(8), Decimal(10), Hexadecimal(16)}
.parsers.dex.ProvideExtraInfoInCodeNodeLabels#
Description: Provide additional information in code node items to client components.
Currently, when this option is enabled, method labels for concrete non-native methods are appended with a ' /N' string where N is the instruction count of the method.
Type and Default: Boolean(false)
.parsers.dex.ProvideFriendlyCodeNodeLabels#
Description: Provide user-friendly code node items (non-qualified, non-internal Java names) to client components.
Methods and field signatures will be more readable, at the risk of potentially appearing conflicting, esp. on obfuscated samples that heavily reuse names across methods, fields, and types.
Type and Default: Boolean(true)
.parsers.dex.ShowActualCallsites#
Description: Determine and display the actual callsite for method invocations. Automatic inline comments will be added when the determined callsite differ from the method reference.
Type and Default: Boolean(true)
.parsers.dex.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.dex.ShowAnnotations#
Description: Show the DEX annotations
Type and Default: Boolean(true)
.parsers.dex.ShowBytecode#
Description: Display the instruction bytecode
Type and Default: Boolean(false)
.parsers.dex.ShowDebugDirectives#
Description: Show the debug directives (metadata)
Type and Default: Boolean(false)
.parsers.dex.ShowInstructionsInGaps#
Description: Parse byte gaps (slack space or unused data bytes that can be present in a method body) and display those bytes as Dalvik instructions
Type and Default: Boolean(false)
.parsers.dex.ShowLineNumbers#
Description: Show the source line numbers (metadata)
Type and Default: Boolean(false)
.parsers.dex.ShowOriginalNames#
Description: Display the original descriptor names of classes/methods/fields as comments
Type and Default: Boolean(false)
.parsers.dex.ShowSpaceBetweenBlocks#
Description: Insert a blank line between basic blocks
Type and Default: Boolean(false)
.parsers.dex.SmaliCompatibility#
Description: Generate assembly code compatible with Smali
Type and Default: Boolean(false)
.parsers.dex.UsePForParameters#
Description: Use p0,p1,... instead of v0,v1,... for variables
Type and Default: Boolean(true)
.parsers.dex.VerifyAccessFlags#
Description: Fail parsing if the access flags of a class, method, or field appear to be illegal
Type and Default: Boolean(false)
.parsers.dex.VerifyHashes#
Description: Fail parsing if the checksum or hash are not as expected
Type and Default: Boolean(false)
.parsers.dex.VerifyVersion#
Description: Fail parsing if the version number is not in the range [35, 40]
Type and Default: Boolean(false)
.parsers.dex.WellKnownLibraryPackages#
Description: CSL of packages that will not originally be fully expanded in code hierarchy tree documents. Use * to prevent auto-expansion for all packages. The star wildcard can also be used as a suffix. In practice, the JEB UI client will not auto-expand those packages by default to avoid cluttering the code hierarchy fragment view.
Type and Default: String("android, androidx, android_src, butterknife, com.airbnb.epoxy, com.airbnb.lottie, com.android, com.facebook, com.fasterxml, com.firebase, com.google, com.ibm, com.microsoft, dagger, io.reactivex, java, javax, kotlin, kotlinx, mono, net, okhttp3, okio, opentk_*, org, retrofit2, xamarin")
.parsers.ihex.BigEndian#
Description: Set to true to specify big-endian. The default is little-endian, unless a specific processor setting overrides it.
Type and Default: Boolean(false)
.parsers.ihex.Processor#
Description: Target processor/microcontroller code; refer to processor plugin type names. The default is x86
Type and Default: String("x86")
.parsers.ihex.WantedImageBase#
Description: Base address hint. Leave empty to let the plugin decide.
Type and Default: String("")
.parsers.ihex.WantedWordsize#
Description: Desired wordsize in bits: 8, 16, 32, etc. Leave empty to let the plugin decide by heuristics
Type and Default: String("")
.parsers.javaclass.EnableDesugaring#
Description: If d8 is the selected converter, enable this option to desugar Java 8+ high-level constructs (such as lambdas) into pseudo-equivalent lower-level constructs. It is recommended to keep this option enabled for large Jar files, since d8 may have problems regenerating call sites and method handles.
Type and Default: Boolean(true)
.parsers.javaclass.UseD8ForDexConversion#
Description: Prefer the d8/r8 compiler over the legacy dx compiler to perform Java bytecode to Dalvik bytecode transpilation
Type and Default: Boolean(true)
.parsers.native.decomp.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_arm.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_arm.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_arm.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_arm.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_arm.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_arm.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_arm.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_arm.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_arm64.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_arm64.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm64.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_arm64.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_arm64.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_arm64.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm64.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_arm64.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_arm64.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_arm64.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_arm64.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_arm64.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_avr.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_avr.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_avr.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_avr.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_avr.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_avr.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_avr.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_avr.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_avr.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_avr.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_avr.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_avr.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_diemvm_bc.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_diemvm_bc.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_diemvm_bc.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_diemvm_bc.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_diemvm_bc.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_diemvm_bc.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_diemvm_bc.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_diemvm_bc.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_diemvm_bc.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_diemvm_bc.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_diemvm_bc.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_diemvm_bc.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_diemvm_bc.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_evmbc.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_evmbc.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_evmbc.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_evmbc.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_evmbc.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_evmbc.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_evmbc.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_evmbc.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_evmbc.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_evmbc.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_evmbc.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_evmbc.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_evmbc.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_mips.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_mips.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_mips.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_mips.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_mips.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_mips.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_mips.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_mips.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_mips64.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_mips64.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips64.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_mips64.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_mips64.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_mips64.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips64.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_mips64.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_mips64.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_mips64.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_mips64.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_mips64.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_riscv.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_riscv.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_riscv.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_riscv.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_riscv.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_riscv.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_riscv.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_riscv.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_riscv.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_riscv.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_riscv.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_riscv.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_simatic_mc7.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_simatic_mc7.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_simatic_mc7.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_simatic_mc7.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_simatic_mc7.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_simatic_mc7.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_simatic_mc7.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_simatic_mc7.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_simatic_mc7.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_simatic_mc7.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_simatic_mc7.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_simatic_mc7.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_wasmbc.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_wasmbc.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_wasmbc.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_wasmbc.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_wasmbc.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_wasmbc.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_wasmbc.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_wasmbc.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_wasmbc.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_wasmbc.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_wasmbc.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_wasmbc.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_x86.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_x86.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_x86.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_x86.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_x86.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_x86.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_x86.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_x86.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.ASTOptimizerMaxRunCount#
Description: Determine how many passes the AST optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(20)
.parsers.native.decomp.dcmp_x86_64.DecryptorSupport#
Description: Support for generic, emulator-backed decryption, allowing optimizers to perform complex code cleaning such as decryption
Type and Default: Selection(1){Disabled(0), Enabled(1)}
.parsers.native.decomp.dcmp_x86_64.EnableDeobfuscators#
Description: Allow deobfuscators to run. A deobfuscator is an optimizer whose primary purpose is to simplify code that was intentionally complicated by an obfuscating tool.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.EnableExternalPlugins#
Description: Enable external plugins, such as custom IR/AST optimizers. If this option is disabled, user-made java/python plugins will not be instantiated by the decompiler.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.EnableUnsafeOptimizers#
Description: Allow unsafe optimizers to run. Unsafe optimizers may make assumptions about the program state (memory and registers) and modify that state.
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.HideCasts#
Description: Hide casts (the output will be incorrect)
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86_64.HideTopLevelNamespaceElements#
Description: Hide top-level namespace elements in raw method names (C++)
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.IROptimizerMaxRunCount#
Description: Determine how many passes the IR optimizer may be allowed to run during an optimization task (0 means no limit)
Type and Default: Integer(10)
.parsers.native.decomp.dcmp_x86_64.ListOfDisabledExternalPlugins#
Description: Comma-separated list of names of decompiler plugins that must be disabled (by default, a plugin is enabled)
Type and Default: String("")
.parsers.native.decomp.dcmp_x86_64.MemoryResolutionPolicy#
Description: A resolution policy guides the memory resolver in terms of what memory dereferences can be directly resolved.
Type and Default: Integer(3)
.parsers.native.decomp.dcmp_x86_64.MergeAdjacentDefinitions#
Description: Merge same type definitions on a single line, e.g.: int i = 0, j = 1;
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86_64.MethodDecompilationTimeout#
Description: Maximum time in seconds allowed for a method decompilation (use 0 to specify no time-out)
Type and Default: Integer(0){0+}
.parsers.native.decomp.dcmp_x86_64.NextDecompKeepIR#
Description: Special non-sticky property used to specify that the IR context must be kept for the next decompilation
Type and Default: Boolean(false)
.parsers.native.decomp.dcmp_x86_64.ReconversionMaxCount#
Description: Maximum decompilation pipeline restart (reconversion) allowed for a routine
Type and Default: Integer(5){0+}
.parsers.native.decomp.dcmp_x86_64.SpaceOutCompounds#
Description: Insert blank lines between compounds
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.StructurerUseVersion#
Description: Version of the structurer to use (0 means use the default structuring algorithms - in release mode, default=newest)
Type and Default: Integer(3){0-3}
.parsers.native.decomp.dcmp_x86_64.UseFriendlyVariableNames#
Description: Generate better identifier names (e.g., based on types or dictionaries) instead of generic names
Type and Default: Boolean(true)
.parsers.native.decomp.dcmp_x86_64.UseWellKnownLiterals#
Description: Whenever possible, generate constants using well-known literals instead of raw immediates
Type and Default: Boolean(true)
.parsers.native.disas.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.arm.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.arm.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.arm.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.arm.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.arm.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.arm.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.arm.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.arm.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.arm.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.arm.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.arm.DefaultMode#
Description: Default plugin mode (ARM or Thumb)
Type and Default: Selection(0){Default mode(0), ARM(32), Thumb(16)}
.parsers.native.disas.arm.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.arm.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.arm.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.arm.ForceWideFlag#
Description: Wide Flag Display (T32 only)
Type and Default: Selection(0){Display All(0), Distinguish 16-bit from 32-bit(1), Display when forced(2)}
.parsers.native.disas.arm.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.arm.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.arm.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.arm.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.arm.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.arm.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.arm.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.arm.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.arm.PerformFakeRoutineCallAnalysis#
Description: Search for Branch and Link (BL) instructions that should be considered as simple branches rather than routine calls (Thumb code optimization)
Type and Default: Boolean(true)
.parsers.native.disas.arm.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.arm.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.arm.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.arm.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.arm.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.arm.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.arm.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.arm.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.arm.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.arm.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.arm.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.arm.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.arm64.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.arm64.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.arm64.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.arm64.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.arm64.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.arm64.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.arm64.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.arm64.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.arm64.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.arm64.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.arm64.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.arm64.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.arm64.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.arm64.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.arm64.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.arm64.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.arm64.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.arm64.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.arm64.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.arm64.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.arm64.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.arm64.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.arm64.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.arm64.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.arm64.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.arm64.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.arm64.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.arm64.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.arm64.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.arm64.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.arm64.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.arm64.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.arm64.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.avr.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.avr.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.avr.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.avr.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.avr.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.avr.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.avr.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.avr.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.avr.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.avr.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.avr.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.avr.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.avr.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.avr.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.avr.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.avr.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.avr.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.avr.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.avr.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.avr.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.avr.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.avr.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.avr.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.avr.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.avr.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.avr.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.avr.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.avr.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.avr.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.avr.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.avr.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.avr.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.avr.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.diemvm_bc.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.diemvm_bc.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.diemvm_bc.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.diemvm_bc.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.diemvm_bc.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.diemvm_bc.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.diemvm_bc.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.diemvm_bc.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.diemvm_bc.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.diemvm_bc.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.diemvm_bc.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.diemvm_bc.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.diemvm_bc.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.diemvm_bc.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.diemvm_bc.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.diemvm_bc.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.diemvm_bc.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.diemvm_bc.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.diemvm_bc.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.diemvm_bc.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.diemvm_bc.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.diemvm_bc.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.diemvm_bc.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.diemvm_bc.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.diemvm_bc.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.diemvm_bc.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.evmbc.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.evmbc.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.evmbc.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.evmbc.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.evmbc.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.evmbc.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.evmbc.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.evmbc.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.evmbc.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.evmbc.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.evmbc.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.evmbc.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.evmbc.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.evmbc.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.evmbc.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.evmbc.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.evmbc.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.evmbc.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.evmbc.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.evmbc.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.evmbc.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.evmbc.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.evmbc.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.evmbc.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.evmbc.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.evmbc.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.mips.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.mips.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.mips.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.mips.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.mips.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.mips.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.mips.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.mips.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.mips.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.mips.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.mips.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.mips.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.mips.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.mips.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.mips.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.mips.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.mips.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.mips.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.mips.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.mips.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.mips.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.mips.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.mips.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.mips.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.mips.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.mips.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.mips.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.mips.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.mips.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.mips.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.mips.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.mips.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.mips.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.mips64.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.mips64.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.mips64.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.mips64.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.mips64.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.mips64.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.mips64.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.mips64.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.mips64.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.mips64.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.mips64.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.mips64.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.mips64.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.mips64.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.mips64.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.mips64.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.mips64.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.mips64.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.mips64.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.mips64.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.mips64.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.mips64.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.mips64.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.mips64.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.mips64.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.mips64.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.mips64.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.mips64.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.mips64.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.mips64.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.mips64.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.mips64.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.mips64.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.riscv.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.riscv.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.riscv.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.riscv.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.riscv.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.riscv.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.riscv.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.riscv.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.riscv.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.riscv.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.riscv.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.riscv.DisplayAbiRegisterNames#
Description: Use abi (standard calling convention) registers instead of xN/fN
Type and Default: Boolean(true)
.parsers.native.disas.riscv.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.riscv.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.riscv.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.riscv.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.riscv.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.riscv.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.riscv.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.riscv.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.riscv.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.riscv.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.riscv.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.riscv.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.riscv.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.riscv.RenderJRX1AsRet#
Description: Render 'JR X1 / JR LR' as 'RET' pseudo-instructions
Type and Default: Boolean(false)
.parsers.native.disas.riscv.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.riscv.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.riscv.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.riscv.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.riscv.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.riscv.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.riscv.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.riscv.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.riscv.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.simatic_mc7.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.simatic_mc7.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.simatic_mc7.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.simatic_mc7.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.simatic_mc7.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.simatic_mc7.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.simatic_mc7.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.simatic_mc7.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.simatic_mc7.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.simatic_mc7.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.simatic_mc7.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.simatic_mc7.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.simatic_mc7.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.simatic_mc7.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.simatic_mc7.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.simatic_mc7.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.simatic_mc7.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.simatic_mc7.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.simatic_mc7.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.simatic_mc7.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.simatic_mc7.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.simatic_mc7.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.simatic_mc7.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.simatic_mc7.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.simatic_mc7.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.simatic_mc7.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.wasmbc.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.wasmbc.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.wasmbc.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.wasmbc.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.wasmbc.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.wasmbc.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.wasmbc.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.wasmbc.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.wasmbc.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.wasmbc.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.wasmbc.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.wasmbc.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.wasmbc.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.wasmbc.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.wasmbc.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.wasmbc.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.wasmbc.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.wasmbc.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.wasmbc.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.wasmbc.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.wasmbc.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.wasmbc.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.wasmbc.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.wasmbc.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.wasmbc.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.wasmbc.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.x86.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.x86.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.x86.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.x86.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.x86.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.x86.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.x86.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.x86.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.x86.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.x86.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.x86.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.x86.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.x86.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.x86.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.x86.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.x86.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.x86.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.x86.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.x86.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.x86.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.x86.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.x86.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.x86.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.x86.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.x86.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.x86.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.x86.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.x86.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.x86.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.x86.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.x86.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.x86.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.x86.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.AdvancedAnalysis#
Description: The advanced analysis is an optional pass that comes after the initial (standard) analysis. It permits discovery of indirect dispatch, therefore providing better routine discovery coverage, and partial resolution of register values.
Type and Default: Selection(0){Disabled(0), Only For Small Binaries(1), Always(2)}
.parsers.native.disas.x86_64.AnalysisStyle#
Description: N/A
Type and Default: Selection(1){Conservative(0), Automatic(1), Aggressive(2), Lazy(3), Lazy no data(4)}
.parsers.native.disas.x86_64.ApplyAndroidNativePrototypes#
Description: Generate and apply prototypes for native methods which are the implementations of Java Native abstract methods.
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.BlockXrefsCount#
Description: Maximum number of cross-references displayed at any address
Type and Default: Integer(50)
.parsers.native.disas.x86_64.CallingConvention#
Description: Default calling convention to use. Leave unknown for automatic detection
Type and Default: Selection(0){__unknown(0), __cdecl(1), __stdcall(2), __fastcall(3), __thiscall(4), __vectorcall(5), __a32(6), aapcs64(7), __o32(8), __n32(9), __n64(10), __sysv_abi(11), __a32_hf(12)}
.parsers.native.disas.x86_64.CharBreak64BitAddresses#
Description: If not empty, the address column will display 64-bit addresses as two 8-hexdigit parts, separated by the provided character string
Type and Default: String("'")
.parsers.native.disas.x86_64.CompilerIdentification#
Description: N/A
Type and Default: Selection(0){Automatic(0), Unknown compiler(1), Generic Linux compiler(2), Android ART(3), Android NDK(4), Generic Windows compiler(5), Microsoft Visual C++(6)}
.parsers.native.disas.x86_64.CreatePackagesFromRoutineNames#
Description: Automatically create packages from native method names; for example 'std::foo::bar' method will be moved to package 'std::foo' and renamed 'bar'.
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.DebugInformationRetrievalPolicy#
Description: Policy regarding the retrieval of externally-stored debugging and symbolic information of code objects. Locations are architecture- and code object- dependent and may be customized via environment variables. Refer to the manual for additional documentation.
Type and Default: Selection(2){Never(0), Local only(1), Local and Network(2)}
.parsers.native.disas.x86_64.DebugInformationUsagePolicy#
Description: Apply and use debug information to improve analysis accuracy (on a best-effort basis)
Type and Default: Selection(1){None(0), Internal(1), All available(2)}
.parsers.native.disas.x86_64.DelayAnalysis#
Description: Delay the analysis until an explicit Analysis action is requested by the user (as opposed to starting binary analysis right after the artifact is opened)
Type and Default: Boolean(false)
.parsers.native.disas.x86_64.Endianness#
Description: Reserved for raw binaries: Wanted endianness (may be overridden by the code parser).
Type and Default: Selection(0){Automatic(0), Little-endian(1), Big-endian(2)}
.parsers.native.disas.x86_64.ForceSynchronousAnalysis#
Description: Block all or permit read-only operations during a code analysis. This option is recommended for large binaries as the initial analysis will terminate faster.
Type and Default: Selection(-1){Default(-1), Non-blocking(0), Blocking(1)}
.parsers.native.disas.x86_64.GapPreferRawFormatting#
Description: Prefer raw formatting (dr XX, dr XXXX) for gaps and slack spaces instead of regular declarations (e.g., db ??)
Type and Default: Boolean(false)
.parsers.native.disas.x86_64.GapRawBytesPerLine#
Description: For raw formatting, determine the maximum number of bytes per line in gaps and slack spaces. Must be a power of 2, else reverts to the default.
Type and Default: Integer(16){0+}
.parsers.native.disas.x86_64.GapRawIntegerSize#
Description: For raw formatting, determine the integer length (in bytes) used for rendering. Must be either 1, 2, 4, or 8, else reverts to the default
Type and Default: Integer(1){0+}
.parsers.native.disas.x86_64.Hide0Padding#
Description: Hide 0 Padding between declared data
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.ImageBase#
Description: If unspecified, the base address from the code object (ELF, PE, MachO...) is used. If none can be found (eg, raw binaries) default address is 0. Also see the related property RelocationBaseForZeroBasedRelocatableObjects
Type and Default: String("")
.parsers.native.disas.x86_64.InstructionAreaLength#
Description: Length in characters of the assembly column containing the instructions
Type and Default: Integer(40){0+}
.parsers.native.disas.x86_64.LabelAreaLength#
Description: Length in characters of the assembly column containing the labels
Type and Default: Integer(16){0+}
.parsers.native.disas.x86_64.LoadTypeLibrariesCodelessSigs#
Description: When applying codeless signatures, automatically load corresponding type libraries.
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.PerformGlobalAnalysis#
Description: Global analysis passes are optional passes provided by specific decompiler modules. They may allow recovery of complex artifacts, such as classes or modules.
Type and Default: Boolean(false)
.parsers.native.disas.x86_64.PerformRttiRecovery#
Description: Attempt C++ Run-Time Type Information (RTTI) discovery and rebuilding (MSVC and Itanium (GCC/CLANG/NDK) are supported)
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.RelocationBaseForZeroBasedRelocatableObjects#
Description: An object specifying no base (typically, a relocatable library file, such as an .so/.dll file) will be relocated and mapped to this address
Type and Default: String("10000h")
.parsers.native.disas.x86_64.RoutineSeparatorLength#
Description: Number of characters used to build the line separating routines
Type and Default: Integer(80){0+}
.parsers.native.disas.x86_64.ShowAddresses#
Description: Display addresses of items
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.ShowBytesCount#
Description: Maximum count of instruction bytes to be displayed before the instruction
Type and Default: Integer(0){0+}
.parsers.native.disas.x86_64.ShowSegmentHeaders#
Description: Display the segment or section headers
Type and Default: Boolean(true)
.parsers.native.disas.x86_64.ShowSpaceBetweenBlocks#
Description: Insert blank lines between basic blocks
Type and Default: Boolean(false)
.parsers.native.disas.x86_64.SignaturePackagesLoading#
Description: Select how signature packages are loaded. Two types of packages exist: JEB default packages for common libraries, and user-made packages (refer to manual for additional information).
Type and Default: Selection(2){Disabled(0), Manual(1), Automatic(2)}
.parsers.native.disas.x86_64.SwitchAnalysisStyle#
Description: Search for possible switch statements at assembly level.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.x86_64.TailCallAnalysisStyle#
Description: Search for possible tail calls optimized as branches, and build proper routines.
Type and Default: Selection(-1){Automatic(-1), Disabled(0), Safe heuristics only(1), Aggressive heuristics(2)}
.parsers.native.disas.x86_64.UseTypeLibraries#
Description: Use native type libraries (e.g. win32, libc, etc.)
Type and Default: Boolean(true)
.parsers.simatic_s7.AugmentDisassembly#
Description: Augment the disassembly whenever possible, e.g. replace opaque parameter addressing with structure information.
Type and Default: Boolean(true)
.parsers.simatic_s7.DisassembleCode#
Description: Disassemble the MC7 code contained in logic blocks (OB, FC, FB, SFC, SFB)
Type and Default: Boolean(true)
.parsers.simatic_s7.GenerateInterfaceDescriptionUnits#
Description: Generate additional text units describing interfaces for logic blocks and data blocks
Type and Default: Boolean(true)
.parsers.simatic_s7.MapActualBytesForDataBlocks#
Description: For data blocks, prefer mapping the actual (current values) bytes insteal of the default (initial values).
Type and Default: Boolean(true)
.parsers.simatic_s7.MapRawBlocksAtZero#
Description: Map the raw bytes of S7 blocks at the beginning of the image (address 0)
Type and Default: Boolean(false)
.parsers.xml.AttributesOnSeparateLines#
Description: For elements having multiple attributes, each key-value pair will be rendered on a separate line
Type and Default: Boolean(true)
.parsers.xml.IndentSpaceCount#
Description: The space count of the indentation string for sub-elements (in [0, 8])
Type and Default: Integer(2){0-8}
.parsers.zip.ProcessEntriesLazily#
Description: The zipped entries will only be processed when required (i.e. when requested by the user). To allow recovery mode for truncated archives, this setting must be enabled.
Type and Default: Boolean(true)
.project.AlwaysProcessDuplicateInputs#
Description: Process binary inputs even if such input was seen earlier and processed as another unit already
Type and Default: Boolean(false)
.project.ArtifactProcessingDepth#
Description: Determine the maximum depth an input artifact (e.g., a file) will be explored to create units and sub-units representing analysis entities
Type and Default: Integer(20){1+}
.project.CompressPersistedProject#
Description: Compress the JDB2 database (recommended)
Type and Default: Boolean(true)
.project.PersistArtifactFiles#
Description: Persist the full artifact files in a JDB2 database. The resulting JDB2 file will be larger since the input files are embedded in it for extra safety.
Type and Default: Boolean(true)
.project.PersistenceStrategy#
Description: Determine how a project will be saved to JDB2
Type and Default: Selection(0){Automatic(0), Full save(1), Quick save(2)}