Toolkits can be helpful.
The National Security Agency released the source code of Ghidra, its reverse engineering tool, April 4.
Ghidra is a software reverse engineering (SRE) framework developed by NSA's Research Directorate for NSA's cybersecurity mission. It helps analyze malicious code and malware like viruses, and can give cybersecurity professionals a better understanding of potential vulnerabilities in their networks and systems.
Key features of Ghidra:
>includes a suite of software analysis tools for analyzing compiled code on a variety of platforms including Windows, Mac OS, and Linux
>capabilities include disassembly, assembly, decompilation, graphing and scripting, and hundreds of other features
>supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes.
>users may develop their own Ghidra plug-in components and/or scripts using the exposed API