User lllllllllllll

31 votes

5 answers

10k views

Why there are not any disassemblers that can generate re-assemblable asm code?

asked Mar 6, 2014 at 0:50

12 votes

2 answers

12k views

Why I can not directly get the content of `.bss` section?

disassembly binary-analysis elf

asked May 1, 2014 at 21:50

10 votes

2 answers

2k views

How to do static analysis to identify pointer from concrete value in assembly?

disassembly assembly x86 static-analysis

asked Jul 31, 2014 at 1:28

7 votes

2 answers

4k views

How to recover information stored in .ctors section?

disassembly x86 c++ elf

asked Sep 23, 2014 at 0:54

7 votes

1 answer

4k views

How to recover the exception info from .gcc_except_table and .eh_handle sections?

disassembly assembly x86 c++ exception

asked Sep 25, 2014 at 1:01

7 votes

4 answers

2k views

Is there any tool to quantitatively evaluate the difference of binary?

binary-analysis bin-diffing

asked Jan 21, 2014 at 16:31

6 votes

1 answer

1k views

Why IDA Pro generated a "j_printf" function call?

ida disassembly windows reassembly

asked Jan 11, 2014 at 1:33

6 votes

2 answers

9k views

What is the difference between static disassembly and dynamic disassembly?

ida disassembly ollydbg disassemblers

asked Jan 17, 2014 at 19:16

6 votes

2 answers

4k views

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

disassembly assembly nasm

asked May 2, 2014 at 18:47

6 votes

4 answers

2k views

What is the "standard" approach to find loop in binary code?

binary-analysis binary

asked Feb 26, 2016 at 1:15

5 votes

2 answers

4k views

How to identify functions in a stripped binary on x86 32bit?

disassembly assembly binary-analysis static-analysis

asked Jul 10, 2014 at 17:44

5 votes

2 answers

5k views

Can IDA Pro automatically deal with VM obfuscated binaries?

ida virtual-machines virtualizers

asked Mar 26, 2014 at 15:31

4 votes

1 answer

427 views

How to deal with this "error" instructions generated by objdump?

disassembly elf objdump

asked May 7, 2014 at 19:51

4 votes

4 answers

1k views

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

disassembly x86 elf reassembly

asked May 16, 2014 at 16:55

4 votes

1 answer

4k views

Why ther are some many padding/leading nop instructions in my binary code?

disassembly assembly elf

asked Apr 16, 2014 at 15:07

4 votes

1 answer

3k views

Can I invoke IDA's plugin BinDiff from command line?

ida idapython idapro-plugins tool-bindiff

asked Mar 19, 2015 at 2:30

4 votes

4 answers

1k views

Why are PUSHF and POPF so slow?

binary-analysis x86 instrumentation binary

asked Jul 14, 2015 at 18:22

3 votes

2 answers

384 views

Detect deadloop in PinTool

pintool

asked Mar 25, 2016 at 17:36

3 votes

1 answer

137 views

Dumpout Process Memory Layout During Loading Time

instrumentation binary-editing

asked Aug 1, 2017 at 2:22

3 votes

1 answer

2k views

Extract firmware images from COTS embedded devices

debugging firmware exploit embedded

asked Sep 26, 2018 at 9:19

3 votes

1 answer

546 views

Point-to analysis of IDA Pro

ida pointer call-graph ida-plugin

asked Oct 10, 2018 at 10:02

3 votes

3 answers

2k views

Jump into the instructions, is it a case `objdump` can't handle?

disassembly assembly x86 reassembly

asked Jul 7, 2014 at 18:17

3 votes

2 answers

2k views

How to deal with this “lea” instructions generated by objdump?

disassembly assembly objdump

asked May 8, 2014 at 2:40

3 votes

1 answer

647 views

How to reuse symbol/data defined in .bss section?

disassembly assembly elf reassembly

asked May 10, 2014 at 16:24

3 votes

1 answer

724 views

conflict function name using objdump to disassemble

disassembly objdump reassembly

asked May 15, 2014 at 3:23

3 votes

1 answer

439 views

Weird instruction identified on disassembler produced assembly code

disassembly assembly x86 objdump

asked Sep 22, 2014 at 5:14

3 votes

3 answers

1k views

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?

assembly memory exploit

asked Apr 9, 2014 at 17:53

3 votes

0 answers

569 views

Where is uni.inc file?

ida

asked Feb 24, 2014 at 14:22

3 votes

1 answer

608 views

Why IDA Pro can not generate this subroutine's code?

ida

asked Feb 26, 2014 at 4:35

3 votes

1 answer

569 views

Why the API GetMnem can not deal with instructions like "stosd", "movsd" in IDA Pro?

ida

asked Feb 16, 2014 at 20:21

Stack Exchange Network

current community

your communities

more stack exchange communities

64 Questions

Why there are not any disassemblers that can generate re-assemblable asm code?

Why I can not directly get the content of `.bss` section?

How to do static analysis to identify pointer from concrete value in assembly?

How to recover information stored in .ctors section?

How to recover the exception info from .gcc_except_table and .eh_handle sections?

Is there any tool to quantitatively evaluate the difference of binary?

Why IDA Pro generated a "j_printf" function call?

What is the difference between static disassembly and dynamic disassembly?

How to directly re-use the dumped content of `.rodata`, `.data` and `.bss` section?

What is the "standard" approach to find loop in binary code?

How to identify functions in a stripped binary on x86 32bit?

Can IDA Pro automatically deal with VM obfuscated binaries?

How to deal with this "error" instructions generated by objdump?

Is it possible to (heuristic) identify the begin addr of main function in a stripped ELF?

Why ther are some many padding/leading nop instructions in my binary code?

Can I invoke IDA's plugin BinDiff from command line?

Why are PUSHF and POPF so slow?

Detect deadloop in PinTool

Dumpout Process Memory Layout During Loading Time

Extract firmware images from COTS embedded devices

Point-to analysis of IDA Pro

Jump into the instructions, is it a case `objdump` can't handle?

How to deal with this “lea” instructions generated by objdump?

How to reuse symbol/data defined in .bss section?

conflict function name using objdump to disassemble

Weird instruction identified on disassembler produced assembly code

Are all the code sequences ended with "ret" potential "gadgets" for ROP attack?

Where is uni.inc file?

Why IDA Pro can not generate this subroutine's code?

Why the API GetMnem can not deal with instructions like "stosd", "movsd" in IDA Pro?