Skip to main content
Tool Factory

Forensics & Binary

ARM Disassembler

Disassemble ARM into readable instructions. Add the content, choose the checks, and review the reported details.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

Run the tool when your input is ready.

Options

Your result appears here

Disassemble ARM into readable instructions. Add the content, choose the checks, and review the reported details.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

ARM Disassembler performs instruction disassembly on supplied binary or media data. The operation returns ARM instructions for the selected 32-bit ARM mode and start address.

The operation returns ARM instructions for the selected 32-bit ARM mode and start address. This result runs in the browser for this catalog category. Processing runs in the browser.

Disassembly interprets bytes under selected assumptions; it does not execute code or prove behavior.

Instructions

  1. Provide file or files for this tool.
  2. Use a public fixture or a binary you are authorized to inspect. This applies to ARM Disassembler.
  3. Confirm architecture, byte order, and start address before reading instructions. This applies to ARM Disassembler.
  4. Compare suspicious instructions with a trusted disassembler when evidence matters. This applies to ARM Disassembler.

Example

Input: ARM (32-bit), Mode ARM, Little Endian, bytes "e3a00000". This encodes MOV R0, #0 in the selected ARM mode.

Settings: ARM Disassembler: Architecture: ARM (32-bit); Mode: ARM. Endianness: Little Endian; starting address: 0x0. Input: hexadecimal bytes e3a00000; show instruction hex and position enabled.

Result: The operation returns ARM instructions for the selected 32-bit ARM mode and start address.

Limits

  • ARM Disassembler: Disassembly does not prove that bytes are executable code.
  • ARM Disassembler: Wrong architecture or offset produces misleading instructions.
  • ARM Disassembler: The output does not explain program intent or establish file provenance.

Questions

What input does ARM Disassembler accept?

ARM Disassembler accepts text. Disassembles ARM machine code into assembly language. Supports ARM (32-bit), Thumb, and ARM64 (AArch64) architectures using the Capstone disassembly framework. Input should be in hexadecimal.

Which settings does ARM Disassembler provide?

ARM Disassembler provides controls for Architecture, Mode, Endianness, Starting address (hex), Show instruction hex, Show instruction position.

What does ARM Disassembler return?

ARM Disassembler returns text. Disassembles ARM machine code into assembly language. Supports ARM (32-bit), Thumb, and ARM64 (AArch64) architectures using the Capstone disassembly framework. Input should be in hexadecimal.