import r2pipe, sys, io sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding='utf-8', errors='replace') r2 = r2pipe.open("Z:/Development/devl/Havoc/HAVOC_NOCD.EXE", ["-e", "bin.relocs.apply=true"]) print("=== 0x464F52 (empty free list path in 0x464E77) ===") print(r2.cmd("pd 40 @ 0x464f52")) print("\n=== 0x464F67 (second alloc helper called from 0x4633D1) ===") print(r2.cmd("pd 60 @ 0x464f67")) print("\n=== 0x4633D1 full: from where 0x464E77 returns NULL ===") print(r2.cmd("pd 80 @ 0x4633d1")) print("\n=== 0x4647BD (called from 0x464E6C) ===") print(r2.cmd("pd 20 @ 0x4647bd")) r2.quit()