๐Ÿงฉ
QualityPython

Decompile

by dariushoule

Decompile is a Quality skill for Claude Code, published by dariushoule in x64dbg-skills.

203 stars16 forkson dariushoule/x64dbg-skillsAdded 2026/09/05Repository updated 2026/03/13
claude-codemcpskillsx64dbg
Install in seconds
Install Decompile
Copy Decompile into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/dariushoule/x64dbg-skills/tree/main/skills/decompile ~/.claude/skills/decompile

Requires Node.js. Downloads this skill only โ€” not the rest of the repository โ€” into your Claude Code skills folder.

Without Node.js

git clone https://github.com/dariushoule/x64dbg-skills.git

Clones the whole repository, then copy the skillโ€™s own directory into your skills folder yourself.

In this catalog

Source file
skills/decompile/SKILL.md in dariushoule/x64dbg-skills
Installs to
~/.claude/skills/decompile
Collection
One of 8 skills cataloged from this repository
Category
Quality โ€” 1662 skills

What Decompile does

Decompile turns a function in a debugged binary into C-like pseudocode using angr. Use it to inspect code when you have an address, symbol, or the current instruction pointer.

Decompile is cataloged under Quality on DirSkills. Decompile comes from a repository tagged claude-code, mcp, skills and x64dbg.

Documentation

README

decompile

Decompile a function from the debugged binary into C-like pseudocode using angr.

If no address is specified, decompiles the function containing the current instruction pointer. Accepts an address or symbol name as an argument.

Instructions

Follow these steps exactly:

1. Check prerequisites

Run pip show angr via Bash. If angr is not installed, tell the user:

angr is not installed. Install it with pip install angr (requires Python >= 3.10). Note: angr is a large package (~500MB+).

Then stop.

2. Verify debugger connection

Call mcp__x64dbg__get_debugger_status to confirm the debugger is connected and paused. If not debugging, tell the user and stop.

3. Determine target function address

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Decompile

  • What else does dariushoule publish alongside Decompile?

    Decompile is one of 8 skills that DirSkills catalogs from dariushoule/x64dbg-skills, the repository it ships in. Its siblings there include Find OEP, Shellcode Analyzer and State Diff. Each one is a separate skill with its own page in this directory, installs the same way Decompile does, and is maintained by dariushoule in that same repository. The rest of the collection is listed on the dariushoule/x64dbg-skills page.

  • How does Decompile compare to other Quality skills?

    Decompile ranks #1502 by stars among the 1662 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Decompile against them. Open each page to compare what they document and how they install.

More from dariushoule/x64dbg-skills

Decompile is one of 8 skills cataloged on DirSkills from dariushoule/x64dbg-skills.

See all 8 skills โ†’
๐Ÿงญ
45m ago

Find OEP

Find OEP traces packed or protected PE executables to locate the original entry point and capture a debugger state snapshot. Use it when a binary needs unpacking, anti-debug evasion, or handoff for reconstruction and analysis.
Quality
20316
๐Ÿงฉ
45m ago

Shellcode Analyzer

Shellcode Analyzer loads a raw shellcode blob into x64dbg for unpacking, static review, and dynamic tracing. Use it when analyzing encoded or encrypted shellcode and identifying imports, anti-debugging, or payload behavior.
Quality
20316
๐Ÿงช
45m ago

State Diff

State Diff compares two debuggee snapshots and reports register and memory changes between them. Use it to see what executed, what memory was modified, and what the changes suggest.
Quality
20316
๐Ÿ’พ
45m ago

State Snapshot

State Snapshot captures all committed memory regions and the full processor state from a live debuggee for offline analysis. Use it when you need a disk snapshot of memory and registers from x64dbg.
DevOps
20316
๐Ÿ”Ž
45m ago

Tracealyzer

Tracealyzer records x64dbg execution step-by-step into or over calls for a set count or stop condition, then analyzes the instruction log. Use it to inspect control flow, loops, and key instructions during debugging.
Quality
20316
๐Ÿ›
45m ago

Vuln Hunter

Vuln Hunter analyzes a paused program in x64dbg, maps imports and exports, and triages attack surface by input source. It then probes for memory, integer, and logic bugs and helps build proof-of-concept exploits.
Quality
20316