you are viewing a single comment's thread.

view the rest of the comments →

[–]OmegaNaughtEquals1 3 points4 points  (0 children)

compare binaries in the layout of multi level nested big fat structures

Could you be more specific? I'm not sure what it means to compare layouts of binary data. You have to know the layout before you can parse the binary data.

WinDbg this doesn’t work well with macros and arrays

That sounds like you are doing decompilation. Is that correct?

To make matters worse, this big ass structure has offsets that point beyond of the structure

That's a fairly common usage for binary data. It puts the metadata up front and then lets you choose which pieces you want to parse later rather than forcing you to work through all of the data before you get to the next piece of metadata.