Skip to content

The Disassemble Program

This program uses radare2 to analyze binary blobs and extract information about functions and arguments. Radare2 is used by several other reverse engineering GUIs, but also has a Python (and other languages) API support. The official GUI for Radare2 is Iaito.

API Issues

There is a change in one of the field names used in the function and op dicts. Fedora 44 uses offset as the field, while Ubuntu use *addr". I have compared them to be sure it's the same data.

Utility Program

This project has a python file for parsing and manipulating binary files. While it does have a few command line options, those are only used for testing during development. The class should just be imported to be useful.

Usage: disassemble [-h] [-v] [-d] [-g GENERATE] [-f FILE] [-s]

options:
-h, --help            show this help message and exit
-v, --verbose         verbose output
-f, --file FILE       The file to operate on
-d, --dump            Dump disassembly
-s, --symbols         Dump symbol table