User lllllllllllll

32 votes

5 answers

11k views

Why there are not any disassemblers that can generate re-assemblable asm code?

asked Mar 6, 2014 at 0:50

12 votes

2 answers

14k views

Why I can not directly get the content of `.bss` section?

asked May 1, 2014 at 21:50

10 votes

2 answers

2k views

How to do static analysis to identify pointer from concrete value in assembly?

asked Jul 31, 2014 at 1:28

7 votes

2 answers

4k views

How to recover information stored in .ctors section?

asked Sep 23, 2014 at 0:54

7 votes

1 answer

4k views

How to recover the exception info from .gcc_except_table and .eh_handle sections?

asked Sep 25, 2014 at 1:01

7 votes

1 answer

2k views

Why IDA Pro generated a "j_printf" function call?

asked Jan 11, 2014 at 1:33

7 votes

4 answers

2k views

Is there any tool to quantitatively evaluate the difference of binary?

asked Jan 21, 2014 at 16:31

6 votes

2 answers

10k views

What is the difference between static disassembly and dynamic disassembly?

asked Jan 17, 2014 at 19:16

6 votes

2 answers

4k views

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

asked May 2, 2014 at 18:47

6 votes

5 answers

3k views

What is the "standard" approach to find loop in binary code?

asked Feb 26, 2016 at 1:15

5 votes

4 answers

2k views

Why are PUSHF and POPF so slow?

asked Jul 14, 2015 at 18:22

5 votes

1 answer

5k views

Why ther are some many padding/leading nop instructions in my binary code?

asked Apr 16, 2014 at 15:07

5 votes

2 answers

4k views

How to identify functions in a stripped binary on x86 32bit?

asked Jul 10, 2014 at 17:44

5 votes

2 answers

5k views

Can IDA Pro automatically deal with VM obfuscated binaries?

asked Mar 26, 2014 at 15:31

4 votes

2 answers

8k views

Recompile the asm file IDA pro created

asked Dec 16, 2013 at 21:03

4 votes

4 answers

1k views

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

asked May 16, 2014 at 16:55

4 votes

1 answer

580 views

How to deal with this "error" instructions generated by objdump?

asked May 7, 2014 at 19:51

4 votes

1 answer

4k views

Can I invoke IDA's plugin BinDiff from command line?

asked Mar 19, 2015 at 2:30

3 votes

2 answers

392 views

Detect deadloop in PinTool

asked Mar 25, 2016 at 17:36

3 votes

1 answer

140 views

Dumpout Process Memory Layout During Loading Time

asked Aug 1, 2017 at 2:22

3 votes

1 answer

2k views

Extract firmware images from COTS embedded devices

asked Sep 26, 2018 at 9:19

3 votes

1 answer

677 views

Point-to analysis of IDA Pro

asked Oct 10, 2018 at 10:02

3 votes

2 answers

2k views

How to deal with this “lea” instructions generated by objdump?

asked May 8, 2014 at 2:40

3 votes

1 answer

765 views

How to reuse symbol/data defined in .bss section?

asked May 10, 2014 at 16:24

3 votes

1 answer

861 views

conflict function name using objdump to disassemble

asked May 15, 2014 at 3:23

3 votes

3 answers

3k views

Jump into the instructions, is it a case `objdump` can't handle?

asked Jul 7, 2014 at 18:17

3 votes

1 answer

489 views

Weird instruction identified on disassembler produced assembly code

asked Sep 22, 2014 at 5:14

3 votes

2 answers

3k views

How to detect a debugger using some "time" checking strategies?

asked Jan 19, 2014 at 5:55

3 votes

1 answer

2k views

What is the meaning of this code generated by IDA Pro?

asked Feb 1, 2014 at 22:03

3 votes

3 answers

1k views

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?

asked Apr 9, 2014 at 17:53

Stack Exchange Network

64 Questions

Why there are not any disassemblers that can generate re-assemblable asm code?

Why I can not directly get the content of `.bss` section?

How to do static analysis to identify pointer from concrete value in assembly?

How to recover information stored in .ctors section?

How to recover the exception info from .gcc_except_table and .eh_handle sections?

Why IDA Pro generated a "j_printf" function call?

Is there any tool to quantitatively evaluate the difference of binary?

What is the difference between static disassembly and dynamic disassembly?

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

What is the "standard" approach to find loop in binary code?

Why are PUSHF and POPF so slow?

Why ther are some many padding/leading nop instructions in my binary code?

How to identify functions in a stripped binary on x86 32bit?

Can IDA Pro automatically deal with VM obfuscated binaries?

Recompile the asm file IDA pro created

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

How to deal with this "error" instructions generated by objdump?

Can I invoke IDA's plugin BinDiff from command line?

Detect deadloop in PinTool

Dumpout Process Memory Layout During Loading Time

Extract firmware images from COTS embedded devices

Point-to analysis of IDA Pro

How to deal with this “lea” instructions generated by objdump?

How to reuse symbol/data defined in .bss section?

conflict function name using objdump to disassemble

Jump into the instructions, is it a case `objdump` can't handle?

Weird instruction identified on disassembler produced assembly code

How to detect a debugger using some "time" checking strategies?

What is the meaning of this code generated by IDA Pro?

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?