disassembly

Nia Deckers presented a new scheme at RustWeek to implement FFI execution for Miri using ptrace and SIGSEGV. The method involves forking a process, setting memory protection, and disassembling instructions to determine memory access details, and uses mutex locks to resolve race conditions. This approach allows Miri to track any external function call at the cost of '8000 segfaults per second', and unexpectedly provides debugger functionality.

Capstone is a lightweight, multi-platform, multi-architecture disassembly framework for binary analysis and reverse engineering. It supports numerous architectures and provides a clean API, with bindings for many languages.

A blog post detailing the successful disassembly and analysis of the Intel 80386 microcode, revealing 215 instruction entry points and the complex internal architecture.