You know that feeling when you take a multiple-choice test and you're pretty sure the right answer is one of the options — you just can't tell which one? That's the state of neural decompilation right now. LLMs tasked with turning compiled binaries back into readable source code already contain the correct answer in their sampling distribution almost all the time. The problem is picking it out. This paper from the University of Lübeck makes a sharp empirical argument: the LLM4Decompile model places ground-truth tokens in its top-five next-token predictions 95.6% of the time. When you let it generate 100 candidate decompilations per input, pass@100 hits 93% on HumanEval-Decompile. The correct reconstruction is almost certainly in there. But single-shot pass@1 accuracy lags far behind, which means the real engineering problem isn't training a better generator — it's building a better selector. The authors build a generate-then-select pipeline and systematically test ranking strategies: text similarity, syntax-tree comparison, embedding distance, consensus voting, and likelihood scoring. The winner among static selectors is negative perplexity, which pushes pass@1 to 73.3% on HumanEval-Decompile without executing any code. When you allow execution-guided selection — actually running the candidates and checking outputs — pass@1 on ExeBench jumps to 86.3%, nearly closing the gap to the oracle (best-of-100) ceiling. The obfuscation angle is where this gets security-relevant. Prior work essentially threw up its hands at obfuscated binaries, claiming released LLM4Decompile checkpoints couldn't handle them. The authors created ExeBench-Obfuscated, a dataset of 362,647 samples processed through the OLLVM obfuscator, then fine-tuned for just one epoch. Combined with their selection pipeline, pass@1 on obfuscated inputs reaches 88.8%. One epoch. That's a direct rebuttal of the prior claim, and it matters because obfuscated code is exactly what malware analysts encounter in the wild. The architectural insight is clean: this is a two-stage pipeline (generate N candidates, then rank) sitting on top of a frozen or lightly fine-tuned LLM decoder. The generation stage uses standard multi-sample decoding from the LLM4Decompile family (1.3B and 6.7B parameter variants). The selection stage is modular — swap in different rankers depending on whether you have execution infrastructure. This decomposition is the paper's real contribution: it reframes neural decompilation from a generation problem into a selection problem. Integrity is solid for this kind of systems paper. Both HumanEval-Decompile and ExeBench are community benchmarks, not custom datasets. The obfuscated dataset is new but the authors release it alongside their code. The main gap is the absence of comparison against commercial decompilation tools beyond Ghidra's baseline output — you'd want to see how this pipeline stacks up against a skilled human analyst using IDA Pro with manual annotation, which is the real-world competitor. The practical implication is immediate for malware analysis teams: if you have compute budget for 100 inference passes per sample and a test harness, you can get functional decompilation of obfuscated binaries at nearly 90% accuracy with a publicly available model and one epoch of fine-tuning. The bottleneck has shifted from 'can the model do this' to 'can we pick the right output,' which is a much more tractable engineering problem.
