A Pseudo-Random List of Retrocomputing Reverse Engineering Links
Another list I’m putting together for my own benefit (the first one is here).
Reverse Engineering Frameworks
Ghidra
Ghidra is a free, open-source software reverse engineering (SRE) suite developed by the U.S. National Security Agency. It’s primarily used to analyze compiled binaries, allowing users to disassemble, decompile, and inspect low-level code. One of its standout features is a powerful decompiler that attempts to reconstruct readable high-level code from machine instructions. Ghidra supports many processor architectures and file formats, making it useful for malware analysis, vulnerability research, and firmware inspection. It also includes scripting and collaboration features.
For retrocomputing, Ghidra supports classic processors and platforms such as MOS 6502 (e.g., Commodore 64, Apple II, NES), Zilog Z80 (ZX Spectrum, MSX), Motorola 68000 (Amiga, Atari ST, early Macintosh), and even older x86 systems used in DOS-era PCs.
RetroDebugger
RetroDebugger is a free, open-source multiplatform real-time debugger for classic 8-bit systems. It lets you inspect and debug code and memory for retro computers by embedding popular emulation engines such as VICE (Commodore 64), Atari800 (Atari XL/XE), and NestopiaUE (NES). The tool provides interactive views into CPU state, memory, video hardware registers, and more, making it useful for both development and reverse engineering of old-school programs. It supports features like pausing, stepping, breakpoints, and memory visualization(including heat maps and raster-cycle-aware video output), which help explore and understand 8-bit behavior in detail. Available for Windows, macOS, and Linux, RetroDebugger is actively developed and appreciated in the retrocomputing community for deep analysis of Commodore-, Atari-, and NES-era software.
6502 Bench
6502bench is a specialized code development workbench for the 65xx family of processors (including 6502, 65C02, and 65802/65816), focused on helping users analyze and work with low-level machine code. Its main component, SourceGen, is an interactive industrial-strength disassembler that converts compiled 6502-family binaries into human-readable assembly language with a point-and-click GUI. SourceGen includes advanced static analysis, automatic branch tracking, symbol support for popular platforms (like Apple II, Commodore, NES, and Atari), and visualization tools to assist understanding of legacy code. It can generate assembly source in formats compatible with common cross-assemblers (such as 64tass, ACME, cc65, Merlin 32) and even invoke them to verify output correctness. 6502bench runs on Windows (7 or later) and is open-source under the Apache-2.0 license,
Hex Editors
HxD
HxD is a fast and lightweight free (but not open source) hex editor for Windows, well suited for regular binary editing tasks. It supports opening and editing very large files efficiently, with features like search and replace, undo/redo, and multiple data views (hex, decimal, and text). HxD can also compare files, compute checksums and hashes, and inspect or edit disks, disk images, and even live process memory. Its interface is traditional and straightforward, making it easy to use without a learning curve or advanced setup.
ImHex
While ImHex claims to be a hex editor, it does in fact go well beyond that by treating binary data as something you can understand and model, not just view and edit byte-by-byte. Its standout feature is a powerful pattern language that lets you describe file formats and data structures declaratively, turning raw bytes into labeled fields, enums, arrays, and structs in real time. It also includes a visual node-based data processor, allowing you to transform, decode, and analyze binary data graphically without writing code. ImHex integrates advanced tooling such as disassembly, diffing, entropy analysis, hashing, YARA rules, and scripting, all inside the same workflow. The UI is sometimes confusing, however, and the documentation lacking.