Questions tagged [arm64]
The arm64 tag has no usage guidance.
15
questions
0
votes
0answers
32 views
Read and write to register with Frida
I have an instruction that looks like this in Ghidra:
100168ff0 e9 13 00 32 orr w9,wzr,#0x1f
Using lldb I can set a breakpoint on the instruction after this, read w9 to confirm what ...
0
votes
0answers
17 views
CALC Branch to some address in ARM64
~STP X20, X19, [SP,#-0x10+var_10]!
0000000101BF9530 STP X29, X30, [SP,#0x10+var_s0]
0000000101BF9534 ADD X29, SP, #0x10
...
0
votes
0answers
37 views
How to add instruction in a new segment in hopper disassembler on arm64
i successfully added a new segment(named oneMore) using hopper but when i add an assembly instruction it's just do nothing, just stay with db 0x00 all the segment:
So can someone could explain me why ...
2
votes
1answer
129 views
Ghidra : iOS Application : Mach-O binary -> Symbol files of dylib or framework are not generated
I'm performing my first reverse on a Mach-O file binary through Ghidra. My problem is that Ghidra doesn't create symbol files of the dylib/frameworks that are loaded in the project. It is really ...
1
vote
1answer
79 views
What do the following AARCH64 LDR and STR instructions do exactly?
The following instructions are part of a IDA's disassembly of an AARCH64 binary. While it is fairly obvious that the # represent pure numbers and the [] probably refer to the memory address referred ...
0
votes
0answers
56 views
What does this short confusing piece of ARM64 (aarch64) assembly do?
I arrived at the following piece of ARM assembly while debugging a Golang binary:
main.go:55 0x4a9300 3f1800f1 CMP $6, R1
main.go:60 0x4a9304 e1434139 MOVBU 80(RSP), R1
main.go:60 ...
0
votes
1answer
66 views
What to look for in the ARM64 assembly of a Golang binary to find the list of kill signals that affect the binary execution?
I'm reverse engineering an ARM64 Golang binary built with musl and I've already detected kill -10,12,15 pid as the signals which interact with it, where 10 and 12 represent user-defined signals. I ...
2
votes
1answer
96 views
Format String Direct Parameter Behavior
I am investigating a format string vulnerability on arm64 (linked against musl libc), and am encountering some odd behavior while debugging the output.
From the decompilation, the program has a ...
0
votes
1answer
59 views
reversing enrichment routine
I want to know where a specific std::string comes from, find the enrichment routine in the C++ application I'm reversing.
The variable I'm looking for it at @ [X21,#8], I don't fully understand the ...
2
votes
1answer
131 views
Mysterious ARM instruction evaluating result to be 0xfe instead of 0xff
I'm facing some issues while debugging an iOS application for educational purposes. This is an iOS application found on the App Store and has some anti-debugging capabilities built in it.
Pretext:
...
1
vote
0answers
41 views
Theos Tweak compilation errors [closed]
While attempting to build a Theos tweak, even a templated one created by Theos, I will encounter the following error
bash: line 1: 4665 Done swift --version
4667 Broken pipe:...
1
vote
1answer
137 views
empty .data section in AARCH64 elf binaries
My question is: Why does readelf -x .data bin.so give me empty data when ghidra does not? (0x00 repeated for section length until last element 0xFFFFFFFF).
ghidra/JEB contradict me by showing that ...
10
votes
3answers
4k views
ARMv8 (AArch64, ARM64) opcodes list
I'm sorry for such as questions where answer would seem to be easily searched in google...
Some time ago I have seen table/list of ARMv8 instructions with opcodes and it was perfect, but I lost link. ...
1
vote
1answer
959 views
LDR specifier combination UXTW
Sorry, if this question seems stupid, but I am new in arm64 and next 2 assembly lines seriously damaged my brain:
LDR W0, [X30,W0,UXTW#2]
ADD X30, X30, W0,UXTW
I have readed ...
1
vote
1answer
272 views
indirect return value address
I have usercall with calling convention I do not fully understand, it returns std::string but IDA recognize it as void.
I've noticed that every calle reads from x8/w8 afterwards, from wikipedia;
...
