Versions:
dEXE is an agentic x86_64 ELF/PE binary decompiler published by turtle170, designed to transform compiled machine code back into functional, compilable C99 source code. The software accepts x86_64 binaries in both ELF and PE formats, covering executables commonly found on Linux and Windows platforms, and processes them through a multi-stage decompilation pipeline. First, dEXE disassembles the input binary into assembly instructions. It then lifts that assembly to an SSA-inspired intermediate representation, which provides a structured, higher-level view of the program's data and operations. From this representation, the tool reconstructs control flow basic blocks, recovering the logical structure of the original program, and finally emits valid C99 source code that can be compiled again. This end-to-end approach places dEXE in the reverse engineering and decompilation software category, where it can serve use cases such as binary analysis, legacy code recovery, security auditing, malware research, and general program understanding tasks where only the compiled artifact is available. A distinguishing characteristic of dEXE is its agentic design, indicating that the decompilation process is driven by an autonomous agent rather than relying solely on static, rule-based translation. The current version of dEXE is 0.1.1, and the software has seen 2 versions released to date, reflecting an early-stage project that remains under active development. Given its version numbering, dEXE is in an initial phase of its lifecycle, yet it already implements the complete decompilation workflow from raw binary input through disassembly, intermediate representation lifting, control flow reconstruction, and C99 code generation. Users working with x86_64 ELF or PE binaries who need readable, recompilable C output can employ dEXE as a specialized tool within a broader reverse engineering toolchain.
Tags: