RetDec
github.com
What it is
RetDec is a free machine-code decompiler based on LLVM that reconstructs functions, types, and higher-level constructs as C or a Python-like language. It supports ELF, PE, Mach-O, COFF, AR archives, Intel HEX, and raw machine code, plus 32-bit Intel x86, ARM, MIPS, PIC32, and PowerPC, and 64-bit x86-64 and ARM64. Analysis includes static executable inspection, compiler and packer detection, and loading and instruction decoding. RetDec can use DWARF and PDB debugging information, reconstruct C++ class hierarchies from RTTI and vtables, and demangle GCC, MSVC, and Borland symbols. An integrated disassembler can generate call graphs, control-flow graphs, and statistics. It can be downloaded as a pre-built package, built from source, or run in Docker; related repositories provide IDA and Radare2 plugins. The project lists Windows 7 or later, Linux, and macOS, with experimental FreeBSD support. Installation requires about 5 to 6 GB of free disk space. The project says development is very limited, with issue responses potentially delayed up to one quarter.
Spec sheet
- What it does
- RetDec is a retargetable machine-code decompiler based on LLVM.Read 3 Oct 2026 · github.com
- Deployment
- RetDec can be downloaded as a pre-built package, built from source, or run in a Docker container.Read 3 Oct 2026 · github.com
- Integrations
- Related repositories provide plugins that embed RetDec into IDA and Radare2.Read 3 Oct 2026 · github.com
- Security
- The repository links to a security policy, but its policy page displayed a loading error when opened.Read 3 Oct 2026 · github.com
- License
- The project states that it is licensed under the MIT license and also incorporates a modified PeLib library under the zlib/libpng license for its original sources.Read 3 Oct 2026 · github.com
- Analysis features
- Features include static executable analysis, compiler and packer detection, and loading and instruction decoding.Read 3 Oct 2026 · github.com
- C++ analysis
- It detects and reconstructs C++ class hierarchies using RTTI and vtables, and demangles GCC, MSVC, and Borland symbols.Read 3 Oct 2026 · github.com
- Debug data
- It extracts and uses DWARF and PDB debugging information.Read 3 Oct 2026 · github.com
- Graphs and disassembly
- It includes an integrated disassembler and can generate call graphs, control-flow graphs, and statistics.Read 3 Oct 2026 · github.com
- Intended use of nightly builds
- The project says nightly builds are mainly for developers, contributors, and experimentation, and warns they may not work reliably and may contain regressions.Read 3 Oct 2026 · github.com
- Output
- It reconstructs functions, types, and high-level constructs and outputs C or a Python-like language.Read 3 Oct 2026 · github.com
- Platforms and storage
- The project lists Windows 7 or later, Linux, macOS, and experimental FreeBSD support, and says an installation needs about 5 to 6 GB of free disk space.Read 3 Oct 2026 · github.com
- Support and maintenance
- The repository says the project is in limited maintenance mode: issues may receive responses with delays up to one quarter, and development is very limited.Read 3 Oct 2026 · github.com
- Supported architectures
- It supports 32-bit Intel x86, ARM, MIPS, PIC32, and PowerPC, plus 64-bit x86-64 and ARM64 (AArch64).Read 3 Oct 2026 · github.com
- Supported formats
- It supports ELF, PE, Mach-O, COFF, AR archives, Intel HEX, and raw machine code.Read 3 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Supports a broad range of executable formats and architectures.
- Can use DWARF and PDB debugging information.
- Offers pre-built, source, and Docker deployment options.
- Related repositories provide IDA and Radare2 plugins.
Limits
- Installation requires about 5 to 6 GB of free disk space.
- FreeBSD support is experimental.
- Development is very limited.
- Issue responses may be delayed up to one quarter.
Who it suits
RetDec suits users analyzing native machine code across its listed formats and architectures, especially those who can build or run the tool themselves. The project’s limited maintenance is important for users who depend on timely issue responses.
Verdict
RetDec covers diverse formats and architectures and provides several analysis outputs and deployment paths. Its limited maintenance and stated disk-space requirement are worth weighing before relying on it.
Where Specifiction places it
- Reverse Engineering Tools#33 of 737.6
- Decompiler Software#17 of 247.5