I am trying to hack a code in binary
.so library. But, when I open
.so library with IDA the library has only one function and no strings and there is
bad_offset before every address. However, when I open the library in hex editor I can see the name of the functions. I think the program modify itself at runtime but I am not sure.
Here is the code of the function that shows in IDA:
ADR R12, 0x1FE8 ADD R12, R12, #0x12000 LDR PC, [R12,#0xF68]!