I'm new to reverse, my question may be stupid. I am trying to reverse a function in the application that reads a string at the address and concatenate it to another

char[250] v30;
char[20] v31;
memcpy(v31, &unk_1ABB65, 20);
strcat(v30, v31);

I tried to read the bytes at this address and concluded that the bytes go beyond ASCII and tried to apply various encodings including extended ASCII, but I didn't get any normal result. Maybe the address changes in runtime (no other references), or does this address point to RAM or NVRAM? I don't understand. Thanks for the help!

  • Read up on stack variable lifetimes. The memory values will only be valid while those instructions are executing. Keep in mind that localized optimizations may reuse stack space when things are no longer used.
    – josh poley
    Commented Mar 25 at 15:16


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.