CFR vs IDA Pro

CFR is a free Java decompiler that reconstructs Java source from Java class files. It can process individual named classes, classes found on a classpath, or a whole JAR, and the command-line tool can place output in a chosen directory with the --outputdir option. Decompilation behavior can be adjusted through command-line options or an options file. The maker says CFR handles many features from Java 9, 12, and 14, and it can attempt class files from other JVM languages; those are rendered as Java rather than their original language. CFR is written in Java 6 and is said to run wherever Java 6 does. It is available as a downloadable JAR, through Maven, and from GitHub. The FAQ notes an API from version 0.135, and the project repository identifies the license as MIT. CFR handles bytecode rather than native code. Its maker also notes that some inputs fall into edge cases where output may be poor. There are no paid plans or usage limits stated.

IDA Pro is a disassembler, decompiler and debugger for analyzing processors, file formats and software. It supports disassembly for more than 60 processor families, and its debugger works with multiple targets, including remote applications. The bundled gooMBA plug-in uses algebraic and program-synthesis techniques, heuristics and an SMT solver to simplify obfuscated binaries. Automation options include the IDA C++ SDK, IDAPython API, IDAT command-line functions and the idalib headless library. Teams can work with GitHub, GitLab, Bitbucket, Gitea or another Git remote, with Git LFS support for large IDB files. Private Lumina is a self-hosted add-on that restricts a knowledge base to authorized users; it exchanges function hashes and metadata rather than entire byte patterns. IDA Pro runs on Linux, macOS and Windows. The IDA Pro Essential plan costs $1,099 a year, with a one-year minimum commitment and no monthly payments. Hex-Rays states that there is no free trial and points users to IDA Free for checking basic capabilities.