EN
ENNA

RetDec vs x64dbg

GitHub Stats

8.5k
Stars
48.0k
985
Forks
2.7k
441
Issues
587
9mo ago
Updated
16d ago
MIT
License
-
C++
Language
C++

About RetDec

RetDec is a retargetable machine-code decompiler based on LLVM, developed by Avast. It converts executable files (PE, ELF, COFF, Mach-O, Intel HEX, and raw binaries) back to high-level C code from x86, ARM, MIPS, PIC32, and PowerPC architectures. RetDec performs compiler and packer detection, static library signature matching, instruction idiom translation, type recovery, and control flow structuring to produce readable decompiled output. Unlike architecture-specific decompilers, RetDec's LLVM-based intermediate representation allows it to support multiple architectures with a single analysis pipeline. It includes both a command-line decompiler and an IDA Pro plugin, and can output C code with recovered variable names, types, and function signatures. RetDec is particularly useful for analyzing firmware, embedded systems, and malware targeting non-x86 architectures.

About x64dbg

x64dbg is an open-source binary debugger for Windows, designed for malware analysis and reverse engineering of executables when source code is not available. It supports both x64 and x32 applications and provides features comparable to commercial debuggers like IDA Pro's debugger. Key capabilities include a full-featured disassembler, graph view for control flow visualization, conditional breakpoints with scripting support, a built-in assembler for live patching, memory map visualization, and an extensive plugin ecosystem. x64dbg includes IDAPython-style scripting, supports TLS callbacks and anti-debug bypass, and can handle packed/obfuscated binaries. Its active community maintains plugins for everything from API monitoring to de-obfuscation, making it the go-to free debugger for Windows binary analysis.

Platform Support

🐧linux🍎macos🪟windows
🪟windows

Tags

RetDec only

decompilerllvmmulti-archarmmipsfirmware

x64dbg only

debuggerdisassemblermalware-analysisx64x32windows-binary