1,683 questions
Advice
0
votes
5
replies
52
views
ghidra m32r processor language
Had to rewrite the only M32R sleigh I could find on GITHUB. As it was my first time not sure how good a job I have accomplished. Checked everything I could against my disassembled code to setup the ...
0
votes
0
answers
57
views
Disassembly code of building with flag “-s” not the same as building without "-s" by cmake
The stripped binary was built with set(CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE} -s"), and I generated both stripped binary and none stripped binary, and use ndk toolchain objdump to ...
3
votes
1
answer
185
views
GDB "disassemble" /m and /s flags do not work when specifying address range
I want to automate disassembly generation with GDB, and in the end I settled on disassemble function. I also want to print it with source code added, which can be achieved with /s or /m command. ...
0
votes
1
answer
62
views
Disassembly view in Xcode: how can I symbolicate a function's address?
In Xcode, I set a breakpoint to a function which is a part of an iOS framework and the disassembly view showed up. All function calls except one (0x1bb286280) were symbolicated (i.e. Xcode showed the ...
1
vote
2
answers
249
views
How does MSVC's optimized asm implement a simple C program that uses strcpy on argv[1]? Understanding IDA output and what it's doing with pointers?
I have written a very basic int main program as shown below:
#include <stdio.h>
#include <windows.h>
int main(int argc, char** argv)
{
char buffer[500];
strcpy(buffer, argv[1]);
...
2
votes
0
answers
160
views
Bypassing C64's PETSCII to screen code mapping
In upper-case mode, the C64 PRINT ASC("A") prints 65 - the ASCII/PETSCII code.
But POKE 1024,65 prints the shifted A character. PRINT CHR$(65), however, prints the proper 'A' character.
With ...
0
votes
1
answer
495
views
IDA Pro 9.1 displaying wrong values of local variables in locals window
Could you please advise on how to resolve the issue with variable display in the Locals window during debugging?
When execution is halted at a breakpoint at the beginning of a function, the variables ...
1
vote
1
answer
121
views
why is there a "RETF 4" at the end of the disassembled function?
im disassembling the old 1989 Borland tool TDSTRIP.EXE that can extract Turbo Debugger information from executables and stumpled over this path-normalizing function
this is the signature im using ...
0
votes
0
answers
72
views
Finding global variables in ARM disassembly
My question is related to In the ARM ABI, how are global variables accessed? but is somewhat different.
I'm trying to debug an issue and for that I went looking in the build outputs of my project. I ...
0
votes
0
answers
120
views
Disassembling multiple files in IDA Pro using Python
I am quite new in IDA Pro. I am trying to disassemble multiple .exe files and save the assembly codes as .asm files. I tried to write a Python script for that. But I don't know how to load an .exe ...
2
votes
1
answer
250
views
Export the Disassembly file(s) from Keil uVision 5
When I'm debugging in uVision 5 the Disassembly window shows the interleaved source code and assembly instructions and the index of the current executed instruction. I need this window exported in a ...
0
votes
1
answer
681
views
How to Debug a Process Launched by Another Application with IDA
I'm learning reverse engineering with IDA Pro and debugging a launcher application (start.exe) that launches another executable (main.exe).
start.exe takes two inputs (call them X and Y), processes ...
3
votes
1
answer
206
views
Is There A Way To Force NASM To Emit Opcode 0x82 In 8086 Mode
Problem
I'm using NASM as a reference assembler for an 8086 disassembler project I'm working on. To increase test coverage I'm looking for an assembly instruction and/or command line flag that will ...
3
votes
0
answers
114
views
Stack alignment and argument accessing in disassembly? [duplicate]
Kind note: This question does not relate to ARM assembly. I used the Android tag, and I am adding this for clarity.
I know how assembly works, but I am new to disassembly, especially accessing the ...
0
votes
1
answer
110
views
How to map runtime address from /proc/pid/maps to binary executable?
With a binary executable and a /proc/pid/maps of a process which spawns from it, I want to map a runtime instruction address at this time (can be retrieved by gdb or any debuggers) towards the ...