Willi Ballenthin
Willi Ballenthin
not sure if there's a central registry of strings, or maybe we can scan the code sections looking for string references.
possibly use something like [RetDec](https://retdec.com/). will need to apply standard vb function prototypes. possibly also need to parse COM interface descriptors.
should contain: ``` Startup="Form1" IconForm="Form1" HelpFile="" ExeName32="InstallExplorer.233" ``` source: [vb-decompiler](https://www.vb-decompiler.org/)
names can be found referenced from `PublicObjectDescriptor.lpMethodNames`. methods (and events!) can be found referenced from `OptionalObjectInfo.lpMethodLinkTable`. but what is the ordering?
should work like [vb.idc](https://www.hex-rays.com/products/ida/support/freefiles/vb.idc). maybe use IDA disassembler instead of capstone.
Does zydis-rs already support one of the wasm targets? If not, what is the outlook for this? I'll admit, I haven't researched this too thoroughly, so maybe the answer is...
I see this repository is for the snippet manager plugin itself, not the snippets, which are hosted in a Gist. The Gist interface doesn't make it easy to report bugs...
fix bug in dependencies where requests should be installed. apparently this supports the voltron integration. ``` /env/bin/calculon console [26/26] Traceback (most recent call last): File "/env/bin/calculon", line 11, in load_entry_point('calculon-calc==0.2',...
via: https://github.com/vivisect/dissect/pull/1 i had used the following function to cast the bytes from one vstruct to another: ``` def cast_vstruct(src_instance, dst_instance): ''' load the bytes that back `src_instance` into `dst_instance`....
There are many opportunities for messages to be deduplicated as they are serialized into the BinExport2 format. For example, mnemonics can trivially be deduplicated, and different instructions can refer to...