r2m2 - use miasm2 as a radare2 plugin

r2m2 is a radare2 plugin that aims at easing reversing new architectures by leveraging radare2 and miasm2 features. Its goal is to be as architecture independent as possible.

It bridges the radare2 and miasm2 communities: radare2 being the graphical interface of miasm2, and miasm2 simplifying the implementation of new architectures.

Currently, r2m2 is able to assemble, disassemble, split blocs, using miasm2, and convert internal miasm2 expressions to radare2 ESIL.

Interested? Watch the video, or check the presentation and design slides.

Demos

r2m2 provides a single radare2 plugin, that can be enabled using the -a option, used in most radare2 commands. The R2M2_ARCH environment variable is used to select the architecture that will be used.

Assemble and disassemble MIPS32 using rasm2

r2m2$ export R2M2_ARCH=mips32l; rasm2 -a r2m2 'addiu a0, a1, 2' |rasm2 -a r2m2 -d -
ADDIU      A0, A1, 0x2

Disassemble random MSP430 instructions in r2

r2m2$ R2M2_ARCH=msp430 r2 -a r2m2 -qc 'woR; pd 5' -
            0x00000000      07fa           and.w      R10, R7
            0x00000002      47ad           dadd.b     R13, R7
            0x00000004      f05e0778       add.b      @R14+, 0x7807(PC)
            0x00000008      f46d81ed       addc.b     @R13+, 0xED81(R4)
            0x0000000c      3fdc           bis.w      @R12+, R15

Assemble MIPS32 using rasm2 and display the call graph using r2

r2m2$ R2M2_ARCH=mips32b rasm2 -a r2m2 'j 0x4; nop' -B > j_nop.bin

r2m2$ R2M2_ARCH=mips32b r2 -a r2m2 -qc 'pd 2' j_nop.bin
        ,=< 0x00000000      0c000001       JAL        0x4
        `-> 0x00000004      00000000       NOP

Testing r2m2

Docker is the recommended solution to use r2m2. Each pull requests are tested with Travis. Upon success, a Docker image is built on Docker Hub and can easily be pulled as follows:

r2m2$ docker pull guedou/r2m2

r2m2$ docker run --rm -it -e 'R2M2_ARCH=mips32l' guedou/r2m2 rasm2 -a r2m2 "addiu a0, a1, 2"
0200a424

Building r2m2

Docker

The Dockerfile takes care of everything, and builds r2m2. The following command lines show how to build the Docker image, run a temporary container, and test r2m2:

r2m2$ docker build -t guedou/r2m2 .

r2m2$ docker run --rm -it -e 'R2M2_ARCH=mips32l' guedou/r2m2 bash
[email protected]:/home/r2m2# rasm2 -L |grep r2m2
adAe  32         r2m2        LGPL3   miasm2 backend

r2m2$ make all install
[..]
mkdir -p [..]

r2m2$ rasm2 -L |grep r2m2
adAe  32         r2m2        LGPL3   miasm2 backend

AttributeError: 'FFI' object has no attribute 'set_source'