6

There are some excellent DBI frameworks for Windows (Intel PIN, DynamoRIO...) but unfortunately none of them expose an IR afaik. I am looking for something like Valgrind's VEX that works on Windows.

Any pointers / references would be greatly appreciated. Thanks in advance!

Improve this question

3 Answers 3

Reset to default
3

If you are searching for lifting assembly to IR, look at either BAP or RevGen.

Edit 2018: There is also great McSema (supports x86, x64 and aarch64).

Improve this answer
3
  • This may be what I was looking for. I always avoided BAP since it is written in OCAML but I guess I'll have to check it out nevertheless.
    – Carlos Garcia
    Commented Apr 1, 2014 at 14:21
  • On a closer look, it does not seem that BAP supports Windows. Any experiences with compiling this on a Windows OS?
    – Carlos Garcia
    Commented Apr 1, 2014 at 16:18
  • Nevermind, it accepts PE files as input. Suboptimal for my purposes but it'd make do. Sorry for the little self-chat here.
    – Carlos Garcia
    Commented Apr 1, 2014 at 16:24
3

dynamoRIO does expose an IR (see documentation). There is just no "written textual" form of it, it is basically a 1:1 mapping of the underlying assembly language and thus very close to the underlying architecture.

Improve this answer
1

Intel's Pin is probably what you want.

Microsoft's Vulcan is great, but I don't think it was ever released publicly, at least not in a standalone form.

Improve this answer
1
  • Intel Pin would be my DBI framework of choice but I could not find any reference to an IR similar to VEX.
    – Carlos Garcia
    Commented Apr 1, 2014 at 14:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.