rellic

Cool! You might even be able to run Rellic [1,2] on the LLVM IR produced by Clang when compiling Objective-C code. If it works, this will spit out goto-free C code, not C++. [1] https://github.com/lifting-bits/rellic [2] https://blog.trailofbits.com/2022/05/17/interactive-decompil...

Rellic[0] is a decompiler that uses a similar, more modern approach to turn LLVM IR into goto-free C code [0]: https://github.com/lifting-bits/rellic

Rellic [1] implements an algorithm that generates goto-free control flows (citation in README), which would be a significant improvement against what Ghidra/IDA generates currently. Unfortunately it looks like the maintenance state of the pieces around Rellic isn't very good, and it's quite rocket science to get it building. It doesn't have as much UI/GUI as Ghidra either so it's a bit far from accessible right now. [1]: https://github.com/lifting-bits/rellic

Hey, LLVM to C is what Rellic does! https://github.com/lifting-bits/rellic

> Either way, you want to start with a working binary and gradually replace some parts of it (but not others) with C code as you gradually understand more of the binary. The author found RetDec, but might not have known about McSema[1] and other binary lifters. The latter have this exact goal in mind: you lift the original binary to LLVM IR (and then potentially to C[2]) to perform transformations. [1]: https://github.com/lifting-bits/mcsema [2]: https://github.com/lifting-bits/rellic FD: My company's work. But I don't currently work on either of those tools.