This is a crossplatform commandline tool, written in Python, which disassembles 32bit PE files with recursive traversal and saves the results as a .json file.
- The results are far away from perfect (no indirect control flows)
- Detecting functionnames from symboltables if given
- Detecting strings
- Detecting functionarguments
You can install this tool with $ pip install .
.
After installation you can run $ crumble -h
for information about the arguments.