AwesomeREA.org

Tool

dewolf

Research decompiler from Fraunhofer FKIE, developed with Singapore's DSO National Laboratories between 2019 and 2021, that runs as a Binary Ninja plugin and starts from Binary Ninja's Medium Level IL. A pipeline of preprocessing, SSA, data-flow and control-flow stages restructures code following the DREAM/DREAM++ approach and emits C-like output. Results appear in a Binary Ninja dock widget, or decompile.py prints or writes them for a whole binary or one named function in batch use.

Requirements and limitations

  • Release at review: v2026.7.11, published 2026-07-11 by the project's automatic release workflow; the reviewed main commit is that release, and plugin.json declares the same version and lists Windows, Linux and macOS.
  • Needs Python 3.10+, a separately licensed Binary Ninja (the README asks for the latest stable release, at least 3.4; plugin.json sets minimum build 4271) with its Python API installed in the same environment, and astyle for indentation; libgraph-easy-perl is needed only for ASCII graph output. The plugin is installed by cloning it into Binary Ninja's plugin folder and installing requirements.txt, which pulls the project's dewolf-logic and dewolf-idioms packages from Git.
  • Settings made in the Binary Ninja GUI do not apply to decompile.py, which reads a config.json in the plugin folder instead; decompiler/util/default.json lists every option.
  • The README calls dewolf a research prototype that is not optimized for production use and warns of bugs or decompilation failures on real-world binaries. Its tests compile C sample sources and keep GNU coreutils executables under tests/coreutils/binaries as fixtures; CI builds a Docker image around a Binary Ninja archive and license supplied from repository secrets.
  • LGPL-2.1 (the plugin.json notice allows any later version). No binaries were decompiled.

About this entry

Type
Tool
Category
Native analysis tools
Relationship
Foundation tool
Targets
Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · fkie-cad/dewolf · Revision 3c389e1
  2. README.md#L25-L72 GitHub · fkie-cad/dewolf · Revision 3c389e1
  3. README.md#L106-L126 GitHub · fkie-cad/dewolf · Revision 3c389e1
  4. plugin.json GitHub · fkie-cad/dewolf · Revision 3c389e1
  5. requirements.txt GitHub · fkie-cad/dewolf · Revision 3c389e1
  6. decompiler/pipeline GitHub · fkie-cad/dewolf · Revision 3c389e1
  7. Makefile GitHub · fkie-cad/dewolf · Revision 3c389e1
  8. .github/workflows/pipeline.yml GitHub · fkie-cad/dewolf · Revision 3c389e1
  9. LICENSE GitHub · fkie-cad/dewolf · Revision 3c389e1
  10. https://github.com/fkie-cad/dewolf/releases/tag/v2026.7.11