0

actually i don't know where the problem but i will describe it I am trying to analyse the firmware of a router and i could extract it and i got these files libxmlapi.so libhttpapi.so libcfmapi.so libmsgapi.so But I can't read the file like this way in the IDA that's how the tutorial show the file and here is how it does like in my computer enter image description here That's the link of the tutorial that i was following https://hg658c.wordpress.com/2017/12/04/decrypting-configuration-files-from-other-huawei-home-gateway-routers/ But when i view the file in IDA mode it shows like 1 letter in every line and there is nothing like urk so i can determine the string that i have to copy to continue the tutorial Here is the files so maybe someone want to take a look at them https://drive.google.com/open?id=1cU9qgAsKecfLNuM7RLrBoin5DHl2GsB1 I tried 3 other firmwares and i couldn't find any thing useful in them ( one of them is tested by other one and he could do it right )

4
  • 1
    Can you be more specific? Which file is the one that you are having trouble reading in IDA? Commented Feb 21, 2019 at 19:04
  • what is "seg" in the title and what kind of "text" you expect to see? is "urk" a typo?
    – Igor Skochinsky
    Commented Feb 21, 2019 at 19:47
  • actually i have a problem with all of them , when i open them they looks like this and every letter in 1 line and i can't read the functions and ( not like the tutorial or even like the screenshots that are in the tutorial ) this how they look like prntscr.com/moc7q0 Commented Feb 21, 2019 at 20:20
  • you should add this screenshot to the question so it's more understandable what you're talking about. also try to fix the typos
    – Igor Skochinsky
    Commented Feb 21, 2019 at 20:27

1 Answer 1

1

Welcome to RE.SE!

Could you elaborate which version of IDA you are using?

The files you shared were ELF shared objectes based on the ARM architecture. Although ELF is a well defined executable format, its seems IDA tries to disassemble the file as RAW. This means it doesn't parse the file format and can not tell apart code from data.

If you are utilizing IDAs free version, this is most likely due to the problem that is does not include arm support.

enter image description here

However, you could use other tools, such as objdump, radare2 or even online services like onlinedisassembler.com for free.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.