dnSpy vs RetDec
GitHub Stats
About dnSpy
dnSpy is a debugger and .NET assembly editor that allows you to decompile, modify, and debug .NET assemblies even without source code. It includes a full-featured debugger that can debug .NET Framework, .NET Core, and Unity game assemblies, with support for breakpoints, stepping, locals, watch windows, and the immediate window. The decompiler produces readable C# or Visual Basic code from compiled assemblies, and the built-in editor allows direct modification of IL code, metadata, and resources. dnSpy is an essential tool for malware analysts examining .NET malware, reverse engineers working with Unity games, and security researchers analyzing compiled .NET applications. While the original repository is archived, several actively maintained forks continue development.
About RetDec
RetDec is a retargetable machine-code decompiler based on LLVM, developed by Avast. It converts executable files (PE, ELF, COFF, Mach-O, Intel HEX, and raw binaries) back to high-level C code from x86, ARM, MIPS, PIC32, and PowerPC architectures. RetDec performs compiler and packer detection, static library signature matching, instruction idiom translation, type recovery, and control flow structuring to produce readable decompiled output. Unlike architecture-specific decompilers, RetDec's LLVM-based intermediate representation allows it to support multiple architectures with a single analysis pipeline. It includes both a command-line decompiler and an IDA Pro plugin, and can output C code with recovered variable names, types, and function signatures. RetDec is particularly useful for analyzing firmware, embedded systems, and malware targeting non-x86 architectures.
Platform Support
Tags
Shared
dnSpy only
RetDec only