smda
A recursive disassmbler optimized for CFG recovery from memory dumps. Based on capstone.
Decision gist · record as of 2026-08-14
Yes. SMDA is actively maintained, has no known vulnerabilities, uses a permissive license, and offers a well-designed API for CFG recovery across multiple architectures and file formats. Install it if you need to extract control flow structure from binaries or memory dumps; avoid it if you only need basic disassembly without CFG analysis or if you require Python versions below 3.11.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.11 or newer; disassembly is CPU-bound and memory usage scales with the largest binary being analyzed (one 3 MB binary reached ~1.8 GB resident memory).
- Installation is straightforward with low friction; the package is actively maintained with a release 3 days ago and requires Python 3.11 or newer.
- Five runtime dependencies (capstone, dncil, dnfile, lief, pycxxfilt) are all standard tools in the binary analysis ecosystem.
License · maintenance · safety
BSD 2-Clause (permissive) — BSD 2-Clause is a permissive license with minimal restrictions, allowing commercial and private use without requiring source disclosure of derivative works.
last release 2026-08-11 (3 days) · last repo commit 2026-08-14 · 261 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 173,554 downloads/mo, #10,304 on PyPI
Alternatives
Verify before relying
pip install smda
from smda.Disassembler import Disassembler
disassembler = Disassembler()
report = disassembler.disassembleFile("/bin/cat")
for fn in report.getFunctions():
for ins in fn.getInstructions():
print(ins)- Performance characteristics on binaries larger than the measured 3 MB test case.
- Whether IDA Pro integration (IDA 8.4+) is available in standard installations or requires the optional ida-domain package.
- Accuracy metrics for CFG recovery compared to other disassemblers on real-world binaries.
What it is and what it does
SMDA is a Python library for analyzing compiled binaries and memory dumps by recovering their control flow structure. It reads PE, ELF, Mach-O, and raw memory files, then disassembles them using Capstone (for x86/x64 and ARM64) or specialized backends (for .NET CIL and Dalvik), producing a structured report of functions, basic blocks, instructions, and the edges between them. The library is optimized for accurate CFG recovery rather than speed, making it useful for malware analysis, reverse engineering, and binary instrumentation workflows.
The package includes both a single-file API and a batch processor for analyzing corpora in parallel. It can optionally infer Windows API references, integrate with IDA Pro to augment existing analysis, and export results as JSON or reconstruct binaries from recovered CFGs. Memory usage is dominated by the largest file in flight rather than accumulating across files, and performance can be tuned by disabling optional metadata calculations (hashing, nesting depth, strongly connected components) that downstream consumers may not need.
Use it for
- Analyze malware samples to extract function boundaries and control flow for behavioral analysis or signature generation.
- Process memory dumps from running processes to recover function structure without relying on debug symbols.
- Batch-process a corpus of binaries in parallel to extract CFGs for machine learning or statistical analysis.
- Augment IDA Pro's conservative function detection by running SMDA's independent analysis and importing missing function starts back into IDA.
- Extract Windows API call patterns from PE binaries by using the ApiScout method to infer API references.
- Analyze Dalvik bytecode from raw DEX files to understand Android application control flow.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
SMDA is actively maintained, has no known vulnerabilities, uses a permissive license, and offers a well-designed API for CFG recovery across multiple architectures and file formats. Install it if you need to extract control flow structure from binaries or memory dumps; avoid it if you only need basic disassembly without CFG analysis or if you require Python versions below 3.11.
Install
smda on PyPI
Before you install
Installation is straightforward with low friction; the package is actively maintained with a release 3 days ago and requires Python 3.11 or newer. Five runtime dependencies (capstone, dncil, dnfile, lief, pycxxfilt) are all standard tools in the binary analysis ecosystem.
Requires Python 3.11 or newer; disassembly is CPU-bound and memory usage scales with the largest binary being analyzed (one 3 MB binary reached ~1.8 GB resident memory).
License in practice
BSD 2-Clause is a permissive license with minimal restrictions, allowing commercial and private use without requiring source disclosure of derivative works.
Quickstart
pip install smda
from smda.Disassembler import Disassembler
disassembler = Disassembler()
report = disassembler.disassembleFile("/bin/cat")
for fn in report.getFunctions():
for ins in fn.getInstructions():
print(ins)Verify before relying
- Performance characteristics on binaries larger than the measured 3 MB test case.
- Whether IDA Pro integration (IDA 8.4+) is available in standard installations or requires the optional ida-domain package.
- Accuracy metrics for CFG recovery compared to other disassemblers on real-world binaries.
Package facts
| License | BSD 2-Clause permissive |
| Python support | Supports the current Python release >=3.11 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 5 packagescapstonedncildnfileliefpycxxfilt |
| Maintenance | Actively maintained 3 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 173,554 / month, #10,304 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: SecurityTopic :: Software Development :: Disassemblers |
Evidence: smda-4.4.7-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “control flow graph recovery”
- smdaSMDA is a recursive disassembler library that recovers control flow…
- taskflowTaskFlow is a library for defining and executing workflows as…
- schedulaSchedula is a flow-based programming library that automatically…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also evmdasm · idapro · dncil · capstone · xdis · ida-hcli · nvidia-cuda-nvdisasm · ropper · vivisect · binsize