Demystify Today's Binary Disassembling and How Modern ABI Makes it Easier
summary
Paper reads source code of eight open tools Ghidra, Angr, McSema, Dyninst, Radare2, Jakstab, Uroboros, Objdump and documents 44 strategies (15 principled, 29 heuristics). A new benchmark of ~4,000 binaries with compiler-instrumented ground truth measures each strategy’s contribution and error modes; heuristics recover ~50% of instructions and ~20% of functions but cause most errors. Exploiting System V x64 call frame information yields near-symbol coverage and commercial-grade accuracy while avoiding heuristics for verification-friendly disassembly.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:45Research Project
- 1:26Binary Disassembling
- 2:19Tool Selection
- 3:01Existing Disassemblyrs
- 3:35Understanding Disassemblyrs
- 4:49Source Code
- 5:36Strategies
- 6:39Errorprone heuristics
- 7:19Evaluation
- 9:25Results
- 12:50New approach
- 13:31Challenges
- 16:28Verification Friendly
- 17:38Key Challenges
- 20:09Release
related talks
23mAn In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries
51mReverse Engineering Binaries
45m"Advanced Malware Threat: handling obfuscated code using..."
01h 09mDeobfuscate UEFI/BIOS Malware And Virtualized Packers
24m(Ab)using Compiler Tools
18mAnalyzing Bytes: Pre-Disassembly Static Binary Analysis
27mBinSim: Trace-based Semantic Binary Diffing...
16mTooling Design and Lessons Learned from Systematic Evaluations of the Preservation of(…)