Questions tagged [arm64]

The tag has no usage guidance.

10 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
271 views

Cannot find references to functions in vtables

First time doing RE work and I am working on a rather large C++ binary. In Ghidra, there are many functions that do not appear to have any meaningful references to them (unlike some functions where ...
micheal65536's user avatar
3 votes
0 answers
507 views

How to do live debugging of ARM64 binaries on macOS with M1/M2 chips?

I'm trying to figure out why NSSavePanel fails in my SwiftUI app. I tried every possible documentation, or asking on the Swift programming forums - to no avail. I'm originally a Windows programmer, ...
c00000fd's user avatar
  • 1,659
3 votes
0 answers
2k views

Ghidra not decompiling very simple ARM64 program

I'm trying to learn how Ghidra works by using it to analyze a very simple ELF file written in Assembly, compiled on a raspberry pi 4 (ARM64) My Assembly code looks like this: .global _start _start: ...
JohnnyBoy's user avatar
2 votes
0 answers
202 views

Booting a Linux kernel ARM64 boot executable Image

I am self learning reverse engineering and working on reversing a firmware image for an unknown ioT device that's running on Zephyr. I have the firmware image (.img file), which returns 'Linux kernel ...
Mario9987's user avatar
2 votes
0 answers
203 views

how to find address in memory using ADRP and ADD (ARM64) instructions?

This part of the disassembler code takes the symbol "1" from memory to change i I need to know what address is assigned to the "x1" register, but the debugger does not work for me. ...
qazwsx135's user avatar
2 votes
0 answers
331 views

how to find a string in memory having ARM instructions ARDP and LDR?

hello, I disassembled the request sent to the game server, I need to change the symbol, but I don’t know its memory address. Help me understand the ADRP and LDR instructions, I need to understand what ...
qazwsx135's user avatar
1 vote
0 answers
528 views

Reinterpreting local function strings in Ghidra (ARM)

The program I'm working with has stuff like this all over: strbuf = 0x20746567; local_824 = (undefined *)0x6863616d; local_820 = (undefined *)0x20656e69; local_81c = (undefined ...
mattmunee's user avatar
1 vote
0 answers
47 views

View v0, d0 registers in Cutter (ARM64)

When reversing an ARM64 binary in Cutter 2.1, I wanted to emulate certain instructions and view the values that were computed. Cutter's emulation showed the x0-x31 registers but how do I view the v0....
localacct's user avatar
  • 193
0 votes
0 answers
47 views

Debug Linux Kernel ARM64

I need to extract Initramfs from the kernel. The initramfs archive itself is encrypted and located inside the kernel. I couldn't extract the key. I thought to run the kernel in Qemu, connect with the ...
Ren's user avatar
  • 1
0 votes
0 answers
56 views

What are some open source encoder-decoder libraries/binaries for ARM v8 and above?

A basic search yielded me results for Capstone disassembler for ARM v8, can I get details on some open source encoders and decoders for ARM v8 and above?
SV_one's user avatar
  • 1