This (completely!) free version of IDA offers a privilege opportunity to see IDA in action. This light but powerful tool can quickly analyze the binary code samples and users can save and look closer at the analysis results.
C Exe Decompiler Free Download
News 28/Oct/2012: The Boomerang source code has been converted from CVS to Subversion back in 2008;I've finally changed the instructions so that users will get the Subversion repository now.If you are working with a CVS copy, please generate diffs now while the CVS repository still exists.To help with this, the CVS instructions are still available here.I intend to delete the CVS repository in about a month, say early December. 3/Nov/2006: Gerard Krol has volunteered to become the new project admin. He hopes he will be able to help people interested in Boomerang using and understanding it, and he will try (with your help) to make Boomerang the finest decompiler available.We still suffer the loss of our main developers, so please contribute! 18/Sep/2006: The two main developers of Boomerang, QuantumG and Mike Van Emmerik, are withdrawingfrom further development of Boomerang. This is because both have joined a company that owns technologysufficiently similar to that of Boomerang that there is a conflict. Both will be able to answer emailqueries about how Boomerang works at present, but will not be able to comment on suggestions for changes.For more details, see this news item. 15/Sep/2006: The making page has a link to qt-4.1.4-vs2005.zip, which savesa lot of time and effort if compiling the Boomerang GUI with Visual Studio 2005. 14/Sep/2006: The Visual Studio 2005 project file is finally sorted out, so both the console and GUI(Qtgui2) versions of Boomerang can be made with Visual Studio 2005. 5/Sep/2006: The Windows-only GUI version of Boomerang is now deprecated. It has some problems with thehandling of clusters in threads, which there is no time to fix. If you want to continue using the Windows-onlyGUI, you can start with boomerang-win32.vcproj and work from there. The boomerang.vcproj file now makes theconsole version of Boomerang, which is a prerequisite for the qtgi2 version. Also deprecated are the XML loadingand saving facilities, and the transformation parser. Removing the xml code has the effect of making the Cygwinversion runnable again (no idea why).13/Jun/2006: A new alpha release (0.3) is now available for download. See the download page. For source code, use the CVS tag alpha-0_3.7/Jun/2006: QuantumG has started a blog chronicaling his daily activity on a new Qt4 based GUI for Boomerang, along with general Boomerang development and (eventually) other projects he is working on.12/May/2006: Sourceforge have changed the names of the CVS servers. That means that existingrepositories will not work as they stand. You can change the name with a few Unix commands like this:Create a file called changeit with this contents:mv $1 $1.oldsed -e s/@cvs\.sourceforge\.net/@boomerang.cvs.sourceforge.net/ $1.old > $1chmod +x changeitfind . -name Root -exec /absolute/path/to/changeit \;Try to execute this command only once, otherwise the Root.old files will be overwritten.Of course, if you have made no changes to your checked out source, you can just get a freshcheckout. The changes are listed in the FAQ question13, but the only changeis from cvs.sourceforge.net to boomerang.cvs.sourceforge.net.(Also note that the ":80" as was used on the cvs page doesn't workany more either.)We are sorryfor the inconvenience, but this is out of our hands. 10/Apr/2006: Cygwin doesn't seem to be able to compile the loader/MachOBinaryFile.cppsource code, so until some kind soul who knows about such things can fix it, using theMachOBinaryFile loader is now disabled if the host is Cygwin.At least that way, a Cygwin hosted Boomerang will compile, and can decompile programs other thanin the MachO binaryfile format.
It is really difficult to discover the root cause of an external component error without looking the source code. A proper decompiler to analyze the source of the 3rd party component is of great help.
Earlier, .Net Reflector developed by Lutz Roeder was a widely used free .NET decompiler/C# decompiler. Since Red Gate made it a paid license for .NET reflector, developers are in search of best free .NET Reflector alternatives.
In this article, I am explaining some of the best free .NET decompilers and C# decompilers(.exe decompilers/.dll decompilers) available to download. Most of them promise to remain as free for ever.
dotPeek is a free .NET decompiler tool from JetBrains. It support decompiling of .NET framework application from early version 1.0 to version 4.5. This is one of the few decompilers to decompile exe and dll , having support to .NET 4.5 version.
One more .Net decompiler, JustDecompile is a tool from Telerik to enable .NET assembly browsing and to decompile .exe and .dll easy and quick.As like any other Telerik tool JustDecompile is famous with its highly intuitive UI and simplicity in usage.
Hope you find this article useful to find best free .NET .exe decompilers and assembly browsers. If you know other best .NET disassemblers apart from our collection, list them in the comment section below. Also, leave your valuable feedback in the comments section.
DecompilersA decompiler tries to translate an object file into a compilablesource file. There are many decompilers for C# or Java,but only a few for C/C++. See in particular: Ghidra:An open-source decompiler developed by the U.S. National Security Agency,is an advanced interactive environment (seems inspired by IDA - below),for binary analysis and decompilation. It's written in Java, has a userinterface resembling the Eclipse IDE (in fact there's also a plug-in for Eclipse).I've analyzed its implementation (the decompiler is in C++) and it hasmany of the features I wanted to implement in my own decompiler (see REC, below).Users can write their own plug-in for target-specific analysis in eitherJava or python!Runs on Windows, Linux, MacOS, and supports many processors. New processorscan be added by writing text files to specify the processor architecture'sand its instruction set.Overall, an excellent work, which sets a new standard for decompilers. reko:Another open-source decompiler. Written in C#, it thus onlyrun on Windows, or on platforms supporting mono.It accepts binaries compiled for many processors. It has both a GUIwith all the standard views (disassembly, hexdump, C source, project),and can also be used from the command line. RetDec:Originally developed by the Brno University of Technology, Czech Republic,as an on-line service, and AVG Technologies, now part of Avast, it can be downloadedfrom a GitHub repository and run locally. I have not evaluated it, but at the time I had read the paper published by theBrno University team, and it seemed at the level of the other advanceddecompilers available at the time. C4Decompiler:(The original link seems to be dead. I'm leaving the description herein case it becomes available again - I think I have an old versiondownloaded on my hard-disk)A new decompiler under development. Windows only, has a slickuser interface inspired to Visual Studio 2010 with many usefulinteractions, that unfortunately are not always obvious. Onehas to right-click to discover them.The analysis seems very good, at least for the debug-compiledexample included in the installation. Trying it on random executablesfrom the Windows folder had mixed results, from completion of theanalysis to crashes to endless loops.Still it's very promising, as its authors haveclearly put a lot of thought and effort in its development. Boomerang:open source C decompiler. Very advanced set of analysesthat attempt to solve the most difficult problemsfacing decompilers. The generated code quality varies greatly:some functions are almost perfect in their representation of codestructure, local variables and types. Other functions look highlyobfuscated by the number of variables and their uses.It's also rather fragile, as it often crashes with big programs. REC:My own C decompiler for Linux, DOS and Windows.The first decompiler to work on multiple platforms and that supportsmultiple processors (x86 16 and 32-bits, MIPS, 680x0, PowerPC).It's very stable, as it's been tested with hundreds of programs.The quality of the output is not as good as Boomerang's,since its implementation is based on 20 years old coding style(read very difficult to extend). I've now published a new version,RecStudio 4, which supports 64-bit executables. It has not beentested on as many executables, so problems still remain. Also thedifferent analyses performed (SSA), generate totally differentcode that at times may seem of much worse quality (although it'sprobably more correct), than the code generated by the previousversion. Hex Rays:a decompiler plug-in for IDA Pro. The combinationwith IDA's advanced disassembly capabilities and run-time debuggermake it the ideal choice. However it's still very new, and requires IDA Pro.Unlike the others decopilers, it's not free.It also has to stand the test of time in terms of stability. Very promising. Dcc:DOS to C decompiler. One of the first decompilers. It shows its age,but it's still referenced by many other decompilers for itsstructuring abilities. Only supports 8086 (16 bits) programs. More on other decompilers at the Program Transformation Wiki on DecompilationHere's a comparison of the various decompilers: Decompiler Platform TargetsSupport Binary FormatSupport InteractiveBatch RecompilableOutput Structuring Variables Types Notes C4Decompiler Windows IA64 PE-COFF Interactive GUI No Very Good Good Fair Boomerang Windows/Linux IA32MIPSPPC ELFPE-COFFMac-OS Batch withGUI front-end No Very good Good Very good REC Windows/Linux IA32IA64MIPSPPCmc68k ELFPE-COFFAOUTRAWPS-X Batch / Interactive No Good Fair Partial dcc Windows 8086 DOS .com Batch No Good Fair Poor Hex Rays Windows ? ? Interactive ? ? ? ? Testing DecompilersThe quality of a decompiler is based on how good the code it generates is,and how well it performs in the presence of "unexpected" input.Particularly difficult problems are posed by the use of compiler optimizationswhich make the input code highly unstructured and difficult to understand, evenfor a human. Handling the following cases defines the quality of a decompiler:No information on symbol names in the binary file (stripped executable)Static vs. dynamically linked executable files (use pattern matching vs.dynamic linker information to identify access to library functions) 2ff7e9595c
Comments