lllllllllllll's user avatar
lllllllllllll's user avatar
lllllllllllll's user avatar
lllllllllllll
  • Member for 10 years
  • Last seen more than a month ago
32 votes
5 answers
11k views

Why there are not any disassemblers that can generate re-assemblable asm code?

12 votes
2 answers
14k views

Why I can not directly get the content of `.bss` section?

10 votes
2 answers
2k views

How to do static analysis to identify pointer from concrete value in assembly?

7 votes
2 answers
4k views

How to recover information stored in .ctors section?

7 votes
1 answer
4k views

How to recover the exception info from .gcc_except_table and .eh_handle sections?

7 votes
1 answer
2k views

Why IDA Pro generated a "j_printf" function call?

7 votes
4 answers
2k views

Is there any tool to quantitatively evaluate the difference of binary?

6 votes
2 answers
10k views

What is the difference between static disassembly and dynamic disassembly?

6 votes
2 answers
4k views

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

6 votes
5 answers
3k views

What is the "standard" approach to find loop in binary code?

5 votes
4 answers
2k views

Why are PUSHF and POPF so slow?

5 votes
1 answer
5k views

Why ther are some many padding/leading nop instructions in my binary code?

5 votes
2 answers
4k views

How to identify functions in a stripped binary on x86 32bit?

5 votes
2 answers
5k views

Can IDA Pro automatically deal with VM obfuscated binaries?

4 votes
2 answers
8k views

Recompile the asm file IDA pro created

4 votes
4 answers
1k views

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

4 votes
1 answer
580 views

How to deal with this "error" instructions generated by objdump?

4 votes
1 answer
4k views

Can I invoke IDA's plugin BinDiff from command line?

3 votes
2 answers
392 views

Detect deadloop in PinTool

3 votes
1 answer
140 views

Dumpout Process Memory Layout During Loading Time

3 votes
1 answer
2k views

Extract firmware images from COTS embedded devices

3 votes
1 answer
677 views

Point-to analysis of IDA Pro

3 votes
2 answers
2k views

How to deal with this “lea” instructions generated by objdump?

3 votes
1 answer
765 views

How to reuse symbol/data defined in .bss section?

3 votes
1 answer
861 views

conflict function name using objdump to disassemble

3 votes
3 answers
3k views

Jump into the instructions, is it a case `objdump` can't handle?

3 votes
1 answer
489 views

Weird instruction identified on disassembler produced assembly code

3 votes
2 answers
3k views

How to detect a debugger using some "time" checking strategies?

3 votes
1 answer
2k views

What is the meaning of this code generated by IDA Pro?

3 votes
3 answers
1k views

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?