Engineering notes

Blogs


Lifting a VM Handler into a Transfer Function

Read the checked-in stack-add handler from ELF bytes to a virtual-state equation. HydIR supplies the function boundary and native analysis; Triton checks the instructions; the accompanying LLVM model expresses the state change.

Read the VM-handler analysis →


Finding an Input with Triton

Start with one instruction and ask Triton which input makes it return 7. Then see how HydIR applies the same idea to a selected function from an ELF.

Read the Triton article →


How HydIR Lifts a 16-Byte Function

Start with a 16-byte function, read its branch, then follow HydIR's CFG, LLVM IR, C output, and fixture comparison.

HydIR CFG view showing the taken and fallthrough edges for the max2 function
A direct branch and its two successors in the max2 fixture.

Read the worked example →