HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
Laurelai
decompile-dump
C2011–2011
Laurelai / decompile-dump

decompile-dump

Partial stuxnet source decompiled with hexrays, if anyone has better decompile tools feel free to contribute better versions.

5Distinct people
6Mentions
0Explicit recommenders
410GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Partial stuxnet source decompiled with hexrays, if anyone has better decompile tools feel free to contribute better versions.

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by hour6 dated mentions

Observed mentions: 2011-02-13 15:25:11 UTC to 2011-02-14 02:54:10 UTC.

0122011-02-13 15:00:00 UTC to 2011-02-13 16:00:00 UTC (exclusive): 2 mentions; 1 submissions, 1 commentsFeb 13, 15:002011-02-13 16:00:00 UTC to 2011-02-13 17:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2011-02-13 17:00:00 UTC to 2011-02-13 18:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2011-02-13 18:00:00 UTC to 2011-02-13 19:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-13 19:00:00 UTC to 2011-02-13 20:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-13 20:00:00 UTC to 2011-02-13 21:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 commentsFeb 13, 20:002011-02-13 21:00:00 UTC to 2011-02-13 22:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2011-02-13 22:00:00 UTC to 2011-02-13 23:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-13 23:00:00 UTC to 2011-02-14 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-14 00:00:00 UTC to 2011-02-14 01:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-14 01:00:00 UTC to 2011-02-14 02:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2011-02-14 02:00:00 UTC to 2011-02-14 03:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 commentsFeb 14, 02:00

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
Feb 13, 15:002011-02-13 15:00:00 UTC2011-02-13 16:00:00 UTC211
Feb 13, 16:002011-02-13 16:00:00 UTC2011-02-13 17:00:00 UTC101
Feb 13, 17:002011-02-13 17:00:00 UTC2011-02-13 18:00:00 UTC101
Feb 13, 18:002011-02-13 18:00:00 UTC2011-02-13 19:00:00 UTC000
Feb 13, 19:002011-02-13 19:00:00 UTC2011-02-13 20:00:00 UTC000
Feb 13, 20:002011-02-13 20:00:00 UTC2011-02-13 21:00:00 UTC000
Feb 13, 21:002011-02-13 21:00:00 UTC2011-02-13 22:00:00 UTC101
Feb 13, 22:002011-02-13 22:00:00 UTC2011-02-13 23:00:00 UTC000
Feb 13, 23:002011-02-13 23:00:00 UTC2011-02-14 00:00:00 UTC000
Feb 14, 00:002011-02-14 00:00:00 UTC2011-02-14 01:00:00 UTC000
Feb 14, 01:002011-02-14 01:00:00 UTC2011-02-14 02:00:00 UTC000
Feb 14, 02:002011-02-14 02:00:00 UTC2011-02-14 03:00:00 UTC101

What Hacker News says

6 sources
Is this decompiler output accurate? I'm suspicious because proc12 [¹] looks like memcpy, except it's advancing a byte at a time and copying an int at a time: *(int*)local6 = *(int*)local5; local5++; local6++; Either the memcpy code is strangely broken, or the decompiler is putting int * where it means char *. [¹] See full code at https://github.com/Laurelai/decompile-dump/blob/master/outpu... and same for proc20: https://github.com/Laurelai/decompile-dump/blob/master/outpu...
In Stuxnet is now on GitHub
This looks like the output of HexRays [1], which is the best C decompiler I've seen. Defining some structures and typing the variables would make it a lot more readable in some cases. I've used HexRays to make sense of C++ games several times, after investing enough time to define and use data types, the result looks [2] much better, but then again, that's unobfuscated and not optimized C++, not old-school "I know what I'm doing and I don't need the compiler second-guessing me" C. Unfortunately there's still a lot decompilers can't do, mostly compiler tricks (e.g. storing a pointer to the middle of a structure instead of its beginning, and using negative offsets to access other struct members [3] - this is usually obvious when looking at it, but HexRays can't make sense of it so it falls back to raw pointer math). [1] http://www.hex-rays.
Read the rest
In Stuxnet is now on GitHub

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.