disassemblers

Disassemblers are software tools that translate executable machine code into human-readable assembly language. They analyze binaries to reveal the low-level instructions a program executes, typically producing a listing that shows addresses, opcodes, and mnemonic representations. Unlike compilers, which generate code from high-level sources, disassemblers work in the reverse direction to expose how a program is built.

Disassemblers can operate statically, analyzing a binary file or loaded memory image without running the code. Some also provide dynamic analysis capabilities, integrated with debugging environments to trace execution and update the disassembly as values and control flow change. Modern tools often include features such as control-flow graphs, symbol recovery, cross-references, data-flow analysis, and annotations to aid understanding of complex code.

Output types vary by tool but generally include architecture-specific assembly for the target processor, with optional support for mixed or pseudo-code representations. They must handle various architectures and endianness; common targets include x86, x86-64, ARM, MIPS, and PowerPC, with many disassemblers supporting multiple platforms.

Applications of disassemblers span reverse engineering, malware analysis, vulnerability research, software maintenance, legacy code comprehension, and compiler testing. They help analysts understand behavior, identify injected or altered code, and verify binary interfaces.

Disassemblers are related to decompilers; the former produces assembly-language representations, while the latter aims to reconstruct higher-level source code. Some tools offer both capabilities or integrate disassembly with decompilation and graph-based analyses to assist in software analysis.