decompile

Decompile binary functions into C-like pseudocode using angr CFG analysis.

196|17|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/dariushoule/x64dbg-skills --skill decompile
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: decompile
Source: https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile
Command: npx skills add https://github.com/dariushoule/x64dbg-skills --skill decompile

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires angr.

What problem does it solve?

Decompile a function from a binary into readable C-like pseudocode to understand its logic without manually translating assembly.

Core Features & Use Cases

  • Decompile the function at the current instruction pointer if no address is specified, or a provided address or symbol.
  • Build a control-flow graph (CFG) to support robust decompilation and function discovery.
  • Try multiple decompiler configurations to maximize success and produce legible pseudocode.
  • Output the decompiled code for review, debugging, and documentation purposes.

Quick Start

Invoke the decompile command against the target binary and address (or use the current IP) to generate C-like pseudocode.

Frequently Asked Questions about decompile

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decompile a binary function into C-like pseudocode for reverse engineering?▼

You can decompile a binary function into C-like pseudocode by applying CFG-based analysis to extract control flow and logic. This process translates raw assembly instructions into readable C-like syntax for quick understanding without manual translation.

Do I need angr installed to decompile a function from a binary?▼

Yes, you need angr installed to perform CFG-based decompilation and output C-like pseudocode. The decompilation process relies on angr to build a control-flow graph that supports robust function discovery and logic extraction.

Can I decompile a function at the current instruction pointer during an x64dbg debugging session?▼

Yes, you can decompile the function at the current instruction pointer if no specific address is provided. This applies to debugging sessions where a function's behavior must be understood directly from the current execution context.

How does a control-flow graph improve binary decompilation results?▼

A control-flow graph improves binary decompilation by mapping execution paths to support robust function discovery. The decompiler tries multiple configurations against this graph to maximize success and produce legible C-like pseudocode output.

What is the best way to analyze a binary function's behavior from assembly without reading raw instructions?▼

The best way to analyze a binary function without reading raw assembly is to decompile it into C-like pseudocode. By building a control-flow graph, the tool automatically translates complex execution paths into readable code for review and documentation.

Why does binary decompilation sometimes fail to produce readable pseudocode?▼

Binary decompilation can fail due to complex control flow or obfuscated assembly instructions. To mitigate this, the tool tries multiple decompiler configurations to maximize success and produce the most legible C-like pseudocode possible.