Features

Analyze and explore PE files

Analyze and explore PE and ELF binaries

Relyze has extensive coverage for Portable Executable (PE) and Executable and Linking Format (ELF) binaries, letting you understand a binaries composition and leverage this rich meta data for analysis. Symbol formats such as PDB, embedded COFF, STAB and MAP files can also be loaded to further enrich the disassembly and analysis. Object files and object archives are also supported.



First look

Use the analysis overview to get a quick insight into a binary. Displaying information about the file, its associated hashes, embed file information, available security mitigations, analysis information, entropy graphs and any embedded security certificates.

  • First look
  • First look


Visualise the data's entropy

Visualise the data

Use the entropy graph to identify packed or encrypted data and other anomalies. The entropy graph overlays corresponding file sections and is interactive so you can navigate into the structure or code views in order to learn more.


Explore the structure

Drill down into a files structure in order to see exactly how it is composed. Explore the structure further with the hex editor, decoding and searching for data on the fly. You can also leverage custom decoders to manipulate portions of data.

Explore the structure

Analyze x86, x64 and ARM code

Analyze x86, x64 and ARM code

Relyze lets you disassemble and analyze x86, x64 and ARM code, and comes with support for the latest instruction set extensions. The plugin framework exposes full access to our disassemblers so you can script then as you need.


Navigate control flow graphs

Relyze visualizes functions with interactive control flow graphs, allowing you to navigate a functions code paths and interact with local variables, instructions and other properties.

Navigate control flow graphs

Navigate Call Graphs

Navigate Call Graphs

Generate and explore interactive call graphs using multiple graph layout algorithms. Our DirectX based hardware accelerated graph rendering engine allows you to explore large complex graphs with a buttery smooth interface.


Function analysis

Automatic analysis identifies functions, their parameters and other meta data such as calling conventions. A functions local variables are automatically analyzed and displayed in the functions control flow graph so you can interact with them, discovering references to locals, updating their data types and more.

Function analysis

See all the code paths

See all the code paths

Get the complete control flow graph for a function with automatic jump table and exception handler analysis. Discover code paths that would otherwise not be visible.


Resolve indirect calls

When possible analysis can resolve indirect call targets to give you the complete picture of a functions logic.

Resolve indirect calls

Find everything

Find everything

Quickly search for and identify interesting parts of the analysis or browse through everything. Items such as segments, imports, exports, functions, strings, bookmarks, symbol lines and search results are consolidated in a unified location for easy traversal.


Data type analysis

Automatic analysis discovers data and identifies suitable data types either through analysis or via assistance from symbols when available. Identify primitive types, strings, complex structures and more.

Data type analysis

  • Static Library Analysis (Before)
  • Static Library Analysis (After)

Static Library Analysis

Automatically identify commonly linked in static library code, such as compiler runtimes, via static library analysis. Identified static library functions are renamed to their original functions names, speeding up your ability to analyze the code.


Create and manage custom data types

Manage the available data types and create new types by defining them using C/C++ declarations. You can also import C/C++ header files in order to access the data types defined within them. Export the available data types as C/C++ headers for interoperability with your own tools.

Create and manage custom data types

Visualise relationships

Visualise relationships

Discover the relationships between code and data with interactive reference graphs. You can generate reference graphs either to specific targets or originating from specific targets. Interact with these reference graphs and navigate through the code and data you discover.


Find paths

Use graph path highlighting to discover all the paths between any two nodes in a graph. Identify the shortest path to an interesting code block, or all the potential paths to some data in a reference graph.

Find paths

Binary Diffing

Interactive Binary Diffing

Perform a differential analysis against two binaries and discover their differences and similarities. Learn what functions have been modified, removed or added. Perfect for patch analysis when verifying security fixes or when analysing malware variants.


Custom address modes

Display and navigate code based on either relative virtual addresses or virtual addresses. Instantly re-base a binary to a new virtual base address, great when you are using Relyze with your debugger and have to deal with address space layout randomization (ASLR).

Custom address modes

Expand with plugins

Expand with plugins

Leverage a rich Ruby plugin framework in order to expand Relyze with new capabilities and perform tailored analysis or research against a binary. An integrated plugin editor lets you quickly test out your ideas and everything runs as expected straight out of the box, no additional configuration or third party libraries required.


Archive everything

Use the integrated library manager to archive every file you analyze so you can build up a corpus over time. Apply your archives with custom tags and descriptions in order to easily find and categorize them.

Archive everything

Automated batch analysis

Automated batch analysis*

Process large amounts of files via built in batch analysis. Batch analysis runs in parallel in order to blaze through multiple files quickly, automatically tagging and archiving them to your library.


Multi tab design

Use the GUI's multi tab design to navigate between modules for a fluid analysis experience. Double clicking on an import from one module will navigate you to the corresponding export in another model.

Multi tab design

  • Custom GUI themes
  • Custom GUI themes
  • Custom GUI themes

Custom GUI themes

The GUI is fully themeable in order to give you the best viewing experience.


Unicode Support

The GUI has full Unicode support, allowing you to use Unicode characters in all function and variable names as well as comments and any other user editable portions of the analysis.

Unicode Support