Questions tagged [llvm]

LLVM is a compiler infrastructure, consisting of a collection of reusable, extendable compiler technologies.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Reverse Android native lib

I am wondering how to reverse Android native lib. Its covered with ollvm so the code is awful and I can't understand anything I can use Frida but not Frida stalker (got kicked every time trying to ...
theArt's user avatar
  • 1
2 votes
0 answers

How can i Lifting x86_64 assembly code to LLVM-IR

I'm researching of virus and I'm faced with the task of deobfuscating its virtual machine. I chose to do this through LLVM and I had a question, where can I see a simple example of lifting ...
OSPFv3's user avatar
  • 21
2 votes
1 answer

Disassemble specific mach-o function

I have a mach-o binary and using llvm-objdump version 9 I can disassemble it. I would like to disassemble only a single function though. If I display the symbol table with --syms I can see the ...
Jon's user avatar
  • 167
5 votes
0 answers

Lifting x86 machine code to LLVM IR

I would like to translate a simple x86_64 machine code into LLVM IR, which can be later analyzed. For my particular use case, I need to be able to work with just instructions and opcodes directly, and ...
jgawr's user avatar
  • 51
3 votes
1 answer

Calling Swift 4 methods from C

I have earlier been able to call Swift methods using a function pointer from C, and providing the appropriate arguments because the calling convention was the same. Unfortunately this no longer works....
sdsykes's user avatar
  • 131
1 vote
0 answers

Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?

I am trying to do some blackbox analysis on a iOS ARMv7 binary. It would be interesting to apply the LLVM analysis tools to such a binary, but I don't have source code. Is there a an existing lifter ...
MrSynAckSter's user avatar
  • 1,236
6 votes
1 answer

Recompiling/optimizing redundant code to make analysis easier

I'm analyzing an application created with Borland Delphi but the poor quality of the object code makes analysis difficult and tedious. The code is so convoluted and inflated with superfluous ...
Eric's user avatar
  • 439
20 votes
1 answer

What is the state of art in LLVM IR decompilation?

LLVM IR is a fairly high-level, typed bitcode which can be directly executed by LLVM and compiled to JIT on the fly. It would not surprise me if a new executable format or programming language was ...
nneonneo's user avatar
  • 1,283