Relyze

Relyze is a Windows tool for disassembling, decompiling, and comparing native-code software. It analyzes PE and ELF binaries, object files, and object archives for x86, x64, ARM32 including Thumb mode, and ARM64 (AArch64). Its decompiler produces high-level pseudocode and lets users rename and retype variables and navigate their references. Binary diffing compares binaries and pseudocode to find similarities, differences, and functions that have been changed, removed, or added. Interactive control-flow, call, and reference graphs accompany automatic function and data-type analysis. Batch analysis processes multiple files in parallel and can tag and archive them or run custom plugins. A Ruby plugin framework and command-line support let users use plugins and analyze binaries within existing toolchains. It can import PDB, COFF, STAB, TDS, and MAP symbol files. The free Relyze plan includes Windows 64-bit and 32-bit downloads. System requirements list Microsoft Windows, at least 4 GB of memory, and at least 300 MB of disk space. Support resources include a quick start guide, Plugin SDK documentation, example plugins on GitHub, a changelog, and direct contact.

Relyze brings decompilation, binary comparison, graphs, and batch workflows to Windows users analyzing native code. Its free plan is available, while prices for the listed Professional licenses are not provided.

Relyze suits people analyzing native-code binaries, including those investigating patches or malware variants. Its batch analysis, command-line support, and Ruby plugins may suit users incorporating binary analysis into existing toolchains.

Relyze is a Windows workstation for reverse-engineering native binaries, combining decompilation, comparison, graph-based analysis and automation. It suits analysts who repeatedly inspect PE or ELF builds, investigate patches or malware variants, and need batchable workflows. Its strongest case is structured native-code comparison; readers working with bytecode or outside Windows should choose something else.

Overview

Relyze focuses on the parts of reverse engineering that become laborious across multiple files: turning machine code into navigable pseudocode, identifying changes between binaries, and organizing repeat analysis. It handles both executable formats and lower-level object inputs, so it can fit investigations that begin before a finished application is available. The trade-off is a deliberately narrow remit: native code is the center of the product, and Windows is the only supported desktop platform.

Key features

Analysis covers PE and ELF binaries, object files and object archives on x86, x64, ARM32 (including Thumb mode) and ARM64/AArch64. That architecture coverage is useful for desktop, server and embedded targets, while the lack of bytecode decompilation makes Relyze unsuitable for managed-runtime work.

The decompiler generates high-level pseudocode and supports renaming and retyping variables, with navigation through variable references. Those controls help impose a readable model on unfamiliar routines; they improve investigation flow without turning recovered pseudocode into original source.

Relyze compares binaries and their pseudocode, exposing similarities and differences and identifying functions that were added, removed or modified. This is a particularly direct fit for patch analysis and malware-variant comparison. Interactive control-flow, call and reference graphs offer complementary ways to follow relationships, while automatic function and data-type analysis reduces the amount of initial structural work.

Automation is a significant strength. A Ruby plugin framework and command-line support allow custom processing inside existing toolchains rather than forcing every task through the graphical interface. Built-in batch analysis processes multiple files in parallel and can tag or archive them, or run custom plugins. Symbol imports include PDB, COFF, STAB, TDS and MAP files. The product also provides a quick-start guide, Plugin SDK documentation, example plugins on GitHub, a changelog and direct contact support.

Pricing

Relyze has a free plan at free, with Windows 64-bit (x64) and 32-bit (x86) downloads. It is the sensible starting point for individual exploration and for teams deciding whether the native-code workflow matches their needs.

Paid Professional licenses use custom pricing and differ mainly by user scope, installation count and update term. Professional Trial License covers one named user, three concurrent installs and 30 days of updates, making it appropriate for a short evaluation. Professional User Locked licenses cover one named user and three concurrent installs, with 12-, 24- or 36-month updates. They suit an individual whose work spans several machines; the longer terms trade a larger commitment for a longer update window.

Professional System Locked licenses permit one concurrent install with 12, 24 or 36 months of updates, a better fit for a dedicated workstation than for roaming users. Professional Site Locked — 12 Month Updates allows unlimited users, while Professional Site Locked — 12 Month Updates, Unlimited Roami is intended for unlimited roaming users. Those site options address broad organizational access, but their custom pricing requires a quote before budgeting.

Platforms

Relyze runs on Microsoft Windows and the downloads support both x64 and x86 editions. The listed system requirements are at least 4 GB of memory and 300 MB of disk space. That modest baseline helps deployment on ordinary analysis machines, but there is no macOS or Linux application.

Who it's for

Choose Relyze for native-code reverse engineering, especially when comparing releases, studying patches, examining malware variants or processing collections of binaries. Developers of analysis pipelines will benefit from Ruby plugins, command-line operation and parallel batch processing. It is a poor match for bytecode decompilation, cross-platform desktop use or anyone seeking a broad managed-code tool.

Pros and cons

Pros

• Strong binary-diff focus: function-level added, removed and modified findings make build and patch comparisons concrete.
• Wide native coverage: PE, ELF, object inputs and four architecture families support varied targets.
• Automation built in: Ruby plugins, command-line control and parallel batch analysis support repeatable investigations.
• Useful navigation aids: editable pseudocode plus control-flow, call and reference graphs support structural analysis.
• Free entry point: the no-cost Windows plan allows evaluation before committing to a Professional license.

Cons

• Windows only: analysts on macOS or Linux must use another application or a separate Windows environment.
• No bytecode support: managed-runtime binaries fall outside its stated decompilation scope.
• License complexity: user-, system- and site-locked choices change install and roaming rights, so organizations must match the model carefully.
• Custom-priced Professional plans: buyers cannot determine the paid cost without requesting a quote.

Alternatives

Boomerang is a free, BSD-licensed option for Linux, macOS and Windows when portability and open-source licensing matter more than Relyze’s binary-diff and batch workflow.

IDA Pro is the stronger alternative for users who need a mature multi-platform disassembler and can justify its paid IDA Pro Essential price of $1,099; its free edition is limited to x86-32/x86-64 disassembly and two cloud decompilers.

JEB suits researchers, students, hobbyists and nonprofit reverse engineers wanting a free Community Edition with x86 and x86-64 decompilation, plus Linux and macOS support.

rev.ng is worth considering when an open-source decompilation pipeline and API, web or cross-platform access are priorities.

Binary Ninja is a better fit for buyers wanting a perpetual Personal license across Windows, macOS and Linux; its free plan is aimed at evaluation and education and excludes API and plugin access.

Bytecode Viewer is the appropriate free, GPL v3 open-source choice for bytecode-oriented work rather than native binaries.

dotPeek is a free Windows option when the goal is a straightforward .NET-focused workflow.

Ghidra is a free cross-platform alternative for users who prefer a broadly available reverse-engineering environment.

For category browsing, see Decompiler Software and Reverse Engineering Tools.

Verdict

Relyze is a strong recommendation for Windows-based reverse engineers whose daily work involves native binaries, especially comparative patch or malware analysis and repeatable batch jobs. Its combination of editable pseudocode, function-aware diffing, graphs and scripting is the main reason to choose it. Look elsewhere if you need bytecode decompilation, a macOS or Linux app, or a paid plan with a publicly stated price.