user avatar
user avatar
user avatar
lllllllllllll
  • Member for 8 years, 7 months
  • Last seen more than a month ago
31 votes
5 answers
10k views

Why there are not any disassemblers that can generate re-assemblable asm code?

12 votes
2 answers
12k views

Why I can not directly get the content of `.bss` section?

10 votes
2 answers
2k views

How to do static analysis to identify pointer from concrete value in assembly?

7 votes
2 answers
4k views

How to recover information stored in .ctors section?

7 votes
1 answer
4k views

How to recover the exception info from .gcc_except_table and .eh_handle sections?

7 votes
4 answers
2k views

Is there any tool to quantitatively evaluate the difference of binary?

6 votes
1 answer
1k views

Why IDA Pro generated a "j_printf" function call?

6 votes
2 answers
9k views

What is the difference between static disassembly and dynamic disassembly?

6 votes
2 answers
4k views

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

6 votes
4 answers
2k views

What is the "standard" approach to find loop in binary code?

5 votes
2 answers
4k views

How to identify functions in a stripped binary on x86 32bit?

5 votes
2 answers
5k views

Can IDA Pro automatically deal with VM obfuscated binaries?

4 votes
1 answer
427 views

How to deal with this "error" instructions generated by objdump?

4 votes
4 answers
1k views

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

4 votes
1 answer
4k views

Why ther are some many padding/leading nop instructions in my binary code?

4 votes
1 answer
3k views

Can I invoke IDA's plugin BinDiff from command line?

4 votes
4 answers
1k views

Why are PUSHF and POPF so slow?

3 votes
2 answers
384 views

Detect deadloop in PinTool

3 votes
1 answer
137 views

Dumpout Process Memory Layout During Loading Time

3 votes
1 answer
2k views

Extract firmware images from COTS embedded devices

3 votes
1 answer
546 views

Point-to analysis of IDA Pro

3 votes
3 answers
2k views

Jump into the instructions, is it a case `objdump` can't handle?

3 votes
2 answers
2k views

How to deal with this “lea” instructions generated by objdump?

3 votes
1 answer
647 views

How to reuse symbol/data defined in .bss section?

3 votes
1 answer
724 views

conflict function name using objdump to disassemble

3 votes
1 answer
439 views

Weird instruction identified on disassembler produced assembly code

3 votes
3 answers
1k views

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?

3 votes
0 answers
569 views

Where is uni.inc file?

3 votes
1 answer
608 views

Why IDA Pro can not generate this subroutine's code?

3 votes
1 answer
569 views

Why the API GetMnem can not deal with instructions like "stosd", "movsd" in IDA Pro?