langlauf.io's user avatar
langlauf.io's user avatar
langlauf.io's user avatar
langlauf.io
  • Member for 9 years, 1 month
  • Last seen more than a month ago
0 votes
1 answer
95 views

Tool to analyze .obj files (not COFF) created with /LTCG

6 votes
2 answers
5k views

Ida Pro: parsing complex operand expression using IDAPython

3 votes
1 answer
61 views

GNU strings with --encoding=S

0 votes
1 answer
78 views

Displacement size (disp_size) of x86 instructions

1 vote
1 answer
96 views

Capstone not disassembling vpunpcklqdq, vprold, and vshufi32x4

4 votes
4 answers
2k views

IDA: Generic approach to determine if an instruction reads from, or writes to, memory?

11 votes
2 answers
15k views

Which python library for parsing Linux ELF files?

1 vote
1 answer
2k views

Intel PIN: How to log the value of the fs and gs registers at every instruction?

4 votes
2 answers
1k views

IDA basic block type fcb_cndret - what does it mean?

1 vote
1 answer
122 views

Name other than ".text" for the main code section

7 votes
5 answers
3k views

How to find out if PE executable was compiled with gcc or VisualStudio?

6 votes
3 answers
4k views

How to get the CPU architecture via Idapython?

2 votes
1 answer
810 views

ildasm on Linux: "original" ildasm.exe same as dotnet-ildasm?

1 vote
0 answers
238 views

Parse / statically analyzing .NET binaries using python

6 votes
1 answer
5k views

How to log all memory accesses (read and write) including the memory content in a binary execution trace?

4 votes
1 answer
1k views

IDA Pro: Platform-independent way to check if an instruction is a jump

1 vote
0 answers
167 views

Binary Analysis Tool (BAT) no longer maintained - alternatives? [closed]

0 votes
1 answer
1k views

PE: Strange entry in debug directory (Type: 0xc)

2 votes
1 answer
364 views

Is all debug information of VS-compiled PE files contained in an external PDB file?

6 votes
1 answer
5k views

Unicorn and QEMU: Example use cases to understand the differences

6 votes
2 answers
4k views

Intel PIN: How to access the INS object from inside an analysis function?

3 votes
2 answers
4k views

IDA Pro: Side effects or disadvantages of "Create function"

2 votes
0 answers
452 views

Is there a static data flow analysis tool for .net assemblies?

1 vote
2 answers
850 views

How to programatically extract function names, function arguments and strings from a .NET binary?

1 vote
1 answer
1k views

Function dependencies in static libraries

6 votes
1 answer
1k views

Call to an imported function in a PE file: Why is destination prepended with ds (call ds:func_name)?

3 votes
1 answer
121 views

How would one find test cases for a self-implemented value set analysis (VSA)?

2 votes
2 answers
1k views

ARM assembly: Strange instruction pattern (endless loop?)

2 votes
0 answers
420 views

IDA Pro .til files backward compatibility

4 votes
1 answer
2k views

Intel PIN: InsertPredicatedCall and INS_InsertCall