paper-with-me

Papers

Constraint-Guided Multi-Agent Decompilation for Executable Binary Recovery

2026-04-27 · Yifan Zhang, Xiaohan Wang, Yueke Zhang, Yu Huang, Kevin Leach arxiv

Decompilation -- recovering source code from compiled binaries -- is essential for security analysis, malware reverse engineering, and legacy software maintenance. However, existing decompilers produce code that often fails to compile or execute correctly, limiting their practical utility. We present a multi-agent framework that transforms decompiled code into re-executable source through Multi-level Constraint-Guided Decompilation (MCGD). Our approach employs a hierarchical validation pipeline with three constraint levels: (1) syntactic correctness via parsing, (2) compilability via GCC, and (3) behavioral equivalence via LLM-generated test cases. When validation fails, specialized LLM agents iteratively refine the code using structured error feedback. We evaluate our framework on 1,641 real-world binaries from ExeBench across three decompilers (RetDec, Ghidra, and Angr). Our framework achieves 84-97% re-executability, improving baseline decompiler output by 28-89 percentage points. In comparison with state-of-the-art LLM-based decompilation methods using the same GPT-4o backbone, our approach (84.1%) outperforms LLM4Decompile (80.3%), SK2Decompile (73.9%), and SALT4Decompile (61.8%). Our ablation study reveals that execution-based validation is critical: compile-only approaches achieve 0% behavioral correctness despite 91-99% compilation rates. The system converges efficiently, with 90%+ binaries reaching correctness within 2 iterations at an average cost of $0.03-0.05 per binary. Our results demonstrate that constraint-guided agentic refinement can bridge the gap between raw decompiler output and practically useful source code.

📄 PDF Abstract BibTeX arXiv:2604.23940

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Context-Guided Decompilation: A Step Towards Re-executability

2025-11-03 · Xiaohan Wang, Yuxin Hu, Kevin Leach arxiv

Binary decompilation plays an important role in software security analysis, reverse engineering, and malware understanding when source code is unavailable. However, existing decompilation techniques often fail to produce…

Coda: An End-to-End Neural Program Decompiler

2019-12-01 · NeurIPS 2019 12 · Cheng Fu, Huili Chen, Haolan Liu, Xinyun Chen 외

Reverse engineering of binary executables is a critical problem in the computer security domain. On the one hand, malicious parties may recover interpretable source codes from the software products to gain commercial adv…

Computer SecurityMalware Detection

A Neural-based Program Decompiler

2019-06-28 · Cheng Fu, Huili Chen, Haolan Liu, Xinyun Chen 외

Reverse engineering of binary executables is a critical problem in the computer security domain. On the one hand, malicious parties may recover interpretable source codes from the software products to gain commercial adv…

Computer SecurityMalware Detection

PCodeTrans: Translate Decompiled Pseudocode to Compilable and Executable Equivalent

2026-03-16 · Yuxin Cui, Zeyu Gao, Shuxian He, Siliang Qin 외 arxiv

Decompilation is foundational to binary analysis, yet conventional tools prioritize human readability over strict recompilability and verifiable runtime correctness. While recent LLM-based approaches attempt to refine de…

Automatically Attacking Software Reverse Engineering AI Agents

2026-05-28 · Brian Crawford, Justin Phillips, Patrick McClure arxiv

Software tools for reverse engineering executable binary files, such as Ghidra, enable malware analysts to safely conduct robust static analysis without having access to original source code. Coupled with the analytic po…

Adversarial Attack