Take the 2-minute tour ×
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It's 100% free, no registration required.

There are some excellent DBI frameworks for Windows (Intel PIN, DynamoRIO...) but unfortunately none of them expose an IR afaik. I am looking for something like Valgrind's VEX that works on Windows.

Any pointers / references would be greatly appreciated. Thanks in advance!

share|improve this question

3 Answers 3

up vote 2 down vote accepted

If you are searching for lifting assembly to IR, look at either BAP or RevGen.

share|improve this answer
    
This may be what I was looking for. I always avoided BAP since it is written in OCAML but I guess I'll have to check it out nevertheless. –  Carlos Garcia Apr 1 at 14:21
    
On a closer look, it does not seem that BAP supports Windows. Any experiences with compiling this on a Windows OS? –  Carlos Garcia Apr 1 at 16:18
    
Nevermind, it accepts PE files as input. Suboptimal for my purposes but it'd make do. Sorry for the little self-chat here. –  Carlos Garcia Apr 1 at 16:24

dynamoRIO does expose an IR (see documentation). There is just no "written textual" form of it, it is basically a 1:1 mapping of the underlying assembly language and thus very close to the underlying architecture.

share|improve this answer

Intel's Pin is probably what you want.

Microsoft's Vulcan is great, but I don't think it was ever released publicly, at least not in a standalone form.

share|improve this answer
    
Intel Pin would be my DBI framework of choice but I could not find any reference to an IR similar to VEX. –  Carlos Garcia Apr 1 at 14:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.