Qiling Framework vs Relyze

Qiling Framework is free software for emulating and instrumenting binaries for reverse engineering and security analysis. It runs machine code in an isolated environment and supports debugging across architectures and platforms. Listed architectures include x86, x86_64, ARM, ARM64, MIPS, and 8086; supported formats include PE, Mach-O, ELF, and COM. Hooks can observe instructions, basic blocks, memory access, exceptions, system calls, and I/O. APIs provide access to registers, memory, filesystems, operating systems, debugging, and execution-state saving and restoration. Qiling can also hot patch running code, including loaded libraries. Its IDA Pro plugin can emulate binaries in IDA, display live context, run scripts, save and load snapshots, and deobfuscate code. Qiling uses Unicorn for CPU emulation and adds operating-system awareness, executable loading, dynamic linking, and syscall and I/O handling. Installation options include pip, source, and Docker. It is licensed under GPL version 2 or a later version at the user's option. Some syscalls or operating-system APIs may not be implemented, and users may need to implement or map them.

Relyze is a Windows application for disassembling, decompiling and comparing native-code software. It analyzes PE and ELF binaries, object files and object archives for x86, x64, ARM32, including Thumb mode, and ARM64 (AArch64). Its decompiler produces high-level pseudocode and lets users rename or retype variables and follow variable references. Binary diffing compares binaries and pseudocode to show similarities, differences, and functions that were changed, removed or added. Interactive control-flow, call and reference graphs support investigation alongside automatic function and data-type analysis. Batch analysis handles multiple files in parallel and can tag and archive them or run custom plugins. A Ruby plugin framework and command-line support fit into existing toolchains; symbol imports include PDB, COFF, STAB, TDS and MAP. The product page describes binary diffing for patch analysis and malware-variant analysis. The free Relyze plan costs nothing. The download page lists Windows, at least 4 GB of memory and 300 MB of disk space as requirements.