Questions tagged [llvm]
LLVM is a compiler infrastructure, consisting of a collection of reusable, extendable compiler technologies.
8 questions
0 votes
1 answer
191 views
Reverse Android native lib
I am wondering how to reverse Android native lib. Its covered with ollvm so the code is awful and I can't understand anything I can use Frida but not Frida stalker (got kicked every time trying to ...
- 3
2 votes
0 answers
214 views
How can i Lifting x86_64 assembly code to LLVM-IR
I'm researching of virus and I'm faced with the task of deobfuscating its virtual machine. I chose to do this through LLVM and I had a question, where can I see a simple example of lifting ...
- 21
2 votes
1 answer
840 views
Disassemble specific mach-o function
I have a mach-o binary and using llvm-objdump version 9 I can disassemble it. I would like to disassemble only a single function though. If I display the symbol table with --syms I can see the ...
- 187
5 votes
0 answers
1k views
Lifting x86 machine code to LLVM IR
I would like to translate a simple x86_64 machine code into LLVM IR, which can be later analyzed. For my particular use case, I need to be able to work with just instructions and opcodes directly, and ...
- 51
3 votes
1 answer
2k views
Calling Swift 4 methods from C
I have earlier been able to call Swift methods using a function pointer from C, and providing the appropriate arguments because the calling convention was the same. Unfortunately this no longer works....
- 131
1 vote
0 answers
281 views
Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?
I am trying to do some blackbox analysis on a iOS ARMv7 binary. It would be interesting to apply the LLVM analysis tools to such a binary, but I don't have source code. Is there a an existing lifter ...
- 1,278
6 votes
1 answer
748 views
Recompiling/optimizing redundant code to make analysis easier
I'm analyzing an application created with Borland Delphi but the poor quality of the object code makes analysis difficult and tedious. The code is so convoluted and inflated with superfluous ...
- 439
20 votes
1 answer
8k views
What is the state of art in LLVM IR decompilation?
LLVM IR is a fairly high-level, typed bitcode which can be directly executed by LLVM and compiled to JIT on the fly. It would not surprise me if a new executable format or programming language was ...
- 1,283