Analysis Techniques

In order to improve the analysis of x64 binaries, it is important to try to identify techniques that can aide in the identification or extraction of useful information from the binary in an automated fashion. This chapter will focus on a handful of simple techniques that can be used to better annotate or describe the behavior of an x64 binary. These techniques intentionally do not cover the analysis of code or data flow operations. Such techniques are outside of the scope of this paper.

• Exception Directory Enumeration
  • Functions
  • Stack Frame Annotation
  • Exception Handlers
  
  
• Register Parameter Area Annotation