decompile

Decompile binary functions into C-like pseudocode using angr CFG analysis.

196|17|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/dariushoule/x64dbg-skills --skill decompile
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: decompile
Source: https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile
Command: npx skills add https://github.com/dariushoule/x64dbg-skills --skill decompile

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires angr.

What problem does it solve?

Decompile a function from a binary into readable C-like pseudocode to understand its logic without manually translating assembly.

Core Features & Use Cases

  • Decompile the function at the current instruction pointer if no address is specified, or a provided address or symbol.
  • Build a control-flow graph (CFG) to support robust decompilation and function discovery.
  • Try multiple decompiler configurations to maximize success and produce legible pseudocode.
  • Output the decompiled code for review, debugging, and documentation purposes.

Quick Start

Invoke the decompile command against the target binary and address (or use the current IP) to generate C-like pseudocode.

Frequently Asked Questions about decompile

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decompile a binary function into C-like pseudocode for reverse engineering?

You can decompile a binary function into C-like pseudocode by applying CFG-based analysis to extract control flow and logic. This process translates raw assembly instructions into readable C-like syntax for quick understanding without manual translation.

Do I need angr installed to decompile a function from a binary?

Yes, you need angr installed to perform CFG-based decompilation and output C-like pseudocode. The decompilation process relies on angr to build a control-flow graph that supports robust function discovery and logic extraction.

Can I decompile a function at the current instruction pointer during an x64dbg debugging session?

Yes, you can decompile the function at the current instruction pointer if no specific address is provided. This applies to debugging sessions where a function's behavior must be understood directly from the current execution context.

How does a control-flow graph improve binary decompilation results?

A control-flow graph improves binary decompilation by mapping execution paths to support robust function discovery. The decompiler tries multiple configurations against this graph to maximize success and produce legible C-like pseudocode output.

What is the best way to analyze a binary function's behavior from assembly without reading raw instructions?

The best way to analyze a binary function without reading raw assembly is to decompile it into C-like pseudocode. By building a control-flow graph, the tool automatically translates complex execution paths into readable code for review and documentation.

Why does binary decompilation sometimes fail to produce readable pseudocode?

Binary decompilation can fail due to complex control flow or obfuscated assembly instructions. To mitigate this, the tool tries multiple decompiler configurations to maximize success and produce the most legible C-like pseudocode possible.