> For the complete documentation index, see [llms.txt](https://cyber-reaper.gitbook.io/my-malware-analysis-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cyber-reaper.gitbook.io/my-malware-analysis-guide/guide/advanced-static-analysis/decompilers-and-disassemblers.md).

# Decompilers & Disassemblers

## What are Decompilers and Disassemblers?

Disassemblers and Decompilers are often bound to each other, and they have almost the same concept, they transform the machine the machine code either to Assembly instructions in the Disassemblers or to an approximately similar code in a high-level language in the Decompilers.

{% hint style="warning" %}
You will find lots of things in a decompiled binary executable, remember to just take the key functionalities away.
{% endhint %}

Most of the tools combine the 2 functionalities as they always disassemble the machine code and sometimes decompile it, some of these tools are in the list:

* Ghidra
* IDA
* Cutter

***

## The Disassembler Looks Like...

<figure><img src="https://3687673605-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIL0b8wPkvjYvwtuOPCCx%2Fuploads%2FvjOwr22M0gDEmZdD7DdQ%2Fimage.png?alt=media&amp;token=81392775-14de-4092-93d8-ebd307d10236" alt=""><figcaption></figcaption></figure>

***

## The Decompiler Looks Like...

<figure><img src="https://3687673605-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIL0b8wPkvjYvwtuOPCCx%2Fuploads%2Fn8G5rtUFUHpF3t7MkFh9%2Fimage.png?alt=media&amp;token=06e8ea04-64c3-445f-9b87-0c5bb30aeb04" alt=""><figcaption></figcaption></figure>
