Ghidra
Ghidra Ghidra's decompiler generates readable C-like pseudocode from disassembled binaries across architectures, with P-Code IR for precise control flow recovery and scripting tweaks. Load your executable, auto-decompile functions, and refine outputs with type propagation for deeper insights into obfuscated logic. Open-source from NSA, it's the decomp powerhouse for reverse engineers turning assembly into structured source.
Explore →RetDec
RetDec RetDec is the standalone decompiler that lifts binaries to high-level C code, handling stripped or packed PE/ELF with graph-based analysis for variable recovery and loop unrolling. Compile from C++ source, process files via CLI for annotated outputs, and inspect structs for data flow clarity. Open-source from Avast, it's the code rebuilder for analysts reconstructing intent from low-level chaos.
Explore →Snowman
Snowman Snowman is the lightweight decompiler plugin for Ghidra/IDA, producing clean C pseudocode with minimal dependencies and fast processing for quick function views. Integrate its lib into your RE suite, decompiling snippets on-the-fly with semantic highlighting for easier navigation. Open-source and embeddable, it's the quick-view vignette for pentesters sketching decompiled sketches without full rebuilds.
Explore →Rec Studio
Rec Studio Rec Studio is the multi-platform decompiler that outputs C from x86/ARM binaries, with interactive editing and graphing for refining decomp results in a unified workspace. Build from Qt source, load your target, and tweak pseudocode for accuracy in loops or conditionals. Open-source from Telegram, it's the interactive illustrator for reverse engineers annotating decomp flows.
Explore →r2dec
r2dec r2dec is Radare2's decompiler plugin that generates C from Rizin disassembly, supporting recursive descent for structured outputs on stripped or obfuscated functions. Install via r2pm, pipe binaries through r2 for decomp views, and script refinements for batch processing. Open-source extension, it's the inline interpreter for RE folks decompiling within the r2 ecosystem.
Explore →McSema
McSema McSema is the binary lifter that decompiles x86 to LLVM IR, enabling further analysis or recompilation with symbolic execution for uncovering hidden behaviors. Translate via CLI on PE files, feeding IR to tools like angr for path exploration. Open-source from Trail of Bits, it's the IR elevator for researchers lifting disassembly to intermediate heights.
Explore →RevEng
RevEng RevEng is the experimental decompiler for x86 binaries, focusing on control flow graph recovery and pseudocode generation for legacy or packed codebases. Compile its C++ core, process samples for annotated views, and iterate on outputs for accuracy. Open-source prototype, it's the exploratory emulator for hobbyist reverse engineers prototyping decomp pipelines.
Explore →BFD
BFD (Binary File Descriptor Library) BFD's decomp utilities provide low-level disassembly and symbol parsing for ELF/PE, serving as a foundation for custom viewers with reloc handling for accurate code views. Link its lib in your C projects, querying sections for decomp-ready data streams. Open-source from GNU Binutils, it's the binary bedrock for devs building decomp frontends from scratch.
Explore →angr decompiler
angr decompiler angr's decompiler lifts disassembly to VEX IR then C-like code, with symbolic aids for resolving constants and loops in analyzed binaries. Script its claripy solver in Python to refine decomp outputs for dynamic paths. Open-source framework, it's the symbolic synthesizer for analysts decompiling with runtime-aware twists.
Explore →Hex-Rays Decompiler