Questions tagged [c]
General purpose programming language that uses the procedural and structured programming paradigm.
-1
votes
2answers
56 views
CreateThread returns true but thread doesn't run
I have a PE executable which uses threads to handle most of its functionality. It uses CreateThread API to spawn local threads to handle functions.
The call to the CreateThread returns a valid handle ...
3
votes
2answers
137 views
Which operators use sal, shl, sar or shr
Which operators in C language would result in assembly commands such as sal, shl, sar or shr for example?
0
votes
1answer
71 views
why code at .rodata executes [closed]
How come the following code executes if buf* is @ rodata segment ?
#include <stdio.h>
char *buf[] = {
"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\
\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\...
0
votes
1answer
133 views
How int3 looks like in C
This is assembly code that can catch debugger with int 3 :
MOV ECX, ExceptionHandler
MOV DWORD PTR FS:[0], ExceptionHandler
INT3
///there is debugger!!!
ExceptionHandler:
////no ...
-2
votes
1answer
47 views
Why dont use memcpy? [closed]
Why using memcpy can cause to stack overFlow?
memcpy get the number of bytes to copy, so what is the problem , and how memcpy_s fix it?
2
votes
2answers
136 views
Why are there so much more functions in ida than my source code?
I am trying to learn how to use IDA Pro 6.8 to analyze binaries. However, there are much more functions in ida function list than my code. For example, there is a function in source code that calls ...
-1
votes
1answer
220 views
How to convert assembly to pseudo code? [closed]
I have the following assembly. I don't know how to follow assembly. I was wondering if there is a way to convert assembly to a human readable pseudo code or better yet C code:
init:
mov eax, [ebp+...
0
votes
1answer
100 views
How can I intercept syscall libc function in C++ without writing any code in C file
How can intercept libc function in C++ using LD_PRELOAD. I want to write code only in C++ file and all the logic of symbol fishing (dlsym) must be in C++ file.
Please give an example.
2
votes
1answer
122 views
Finding the main function without symbols
for a C/C++ program compiled on windows using the x86 architecture, what is the best way to find the main function within disassembled code?
I've found various answers to questions similar to this, ...
-2
votes
1answer
104 views
Can someone please help me reverse engineer this assembly code to C please! [closed]
I am really bad at understanding assembly code and the way it works. I have little problems given to me in Assembly code and I have to reverse engineer it to C, but I have been doing really bad job at ...
0
votes
1answer
82 views
Changing local variable in caller from callee in C?
I'm implementing a function which is going to perform some time-consuming task, and I'd like to hack the benchmarking part a bit by changing the variable indicating the CPU time my function has ...
0
votes
1answer
482 views
What does this assembly language program output?
I have been struggling with this for a long time. I have the following assembly language code:
.intel_syntax noprefix
.bits 32
.global asm0
asm0:
push ebp
mov ebp,esp
mov eax,DWORD ...
-1
votes
1answer
97 views
How can I decompile the CC2650 .hex file to C?
I want to decompile it to C, or at least assembly the CC2650 hex file (Bluetooth Low Energy Sensor Tag), that provide TI.
My goal is to know the specific way used by CC2650 to generate the LTK.
I'll ...
5
votes
4answers
3k views
Purpose of test eax,eax after a strcmp
This is my first program i am trying to reverse and my intro to this field.
The C program will test if two strings match, and it will printf() a message for each occasion.
This is what the reversed ...
1
vote
1answer
213 views
problem with scanf/fgets in angr stdin exploration
I want to solve this very basic crackme using angr:
#include <stdio.h>
#include <string.h>
int main(int argc, char *argv[]) {
char buffer[64];
printf("Mot de passe:\n");
...
1
vote
1answer
112 views
Injecting exe file into process fails on windows 7 but works on windows 10 / Execution library function fails, access denied
I'm trying to inject my executable payload into remote process.
I allocated memory in remote process, I converted raw payload using RVA addressing. I applied relocations and imports table.
When I'm ...
0
votes
1answer
42 views
How to protect memory area, not segment or page!
I want to protect the certain memory area, like 0x12345678 ~ 0x12345679.
so if another thread accesses to that area, I want to generate exception.
To solve my problem, I've found and used ...
1
vote
1answer
65 views
Generate this assembly from a c program
I want to generate this assembly code:
mov ecx, <absolute address of func1>
call ecx
How can I write and compile C code which generates this code?
3
votes
1answer
571 views
Understanding Program Arguments on the Stack in Assembly
To self-teach myself reverse engineering, I am writing small C programs and reversing them in order to understands how the compiler sees my code. However, I am having quite tough time understanding ...
0
votes
1answer
153 views
Translating ida macros and pseudocode into C++/C
What would be the translated C output of this hexrays decompiler pseudocode? The values of v6 and v5 are floats just as v8. The value of xmmword_108365D0 is 7FFFFFFF7FFFFFFF7FFFFFFF7FFFFFFFh
v8 = (...
4
votes
1answer
123 views
How do I find out what section variables and strings are defined in?
Given a simple program like this,
void main (int argc, char * argv[] ) {
char * arr[] = {"foo", "bar", "baz"};
*(arr[0]) = 'F';
printf( "%s", arr[0] );
}
How do I find out what section ...
3
votes
1answer
108 views
Basic hello world stack manipulation troubles
I'm a beginner in reverse engineering, and as a beginner I started to read "Reverse Engineering for beginers".
Here is the hello world program from the book (taken from chapter 3, page 12) :
Now ...
1
vote
1answer
222 views
Reading from text file and printing it in IDA Pro
I have a text.txt file and I want to read it and print its content in the Output Window of IDA Pro (Free version).
I wrote an .idc script as follows:
#include <idc.idc>
static main() {
...
-1
votes
0answers
87 views
C code extraction from binary code
I have binary file from microcontroller MPC5674F - 32bit Power Architecture, e200z7 core. When I open it with hex redactor I see C headers, which I would like to unpack. Tried to open file with IDA ...
1
vote
3answers
388 views
Android- hiding private keys in .so file
I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
2
votes
2answers
305 views
ASM code hook/patching with trampoline function
I am stuck on making (my little self-task for learning) that thing:
Basically it should be something like Themida or VMProtect (do mutation, virtualization, etc.), but in my case,
i want to take ASM ...
1
vote
2answers
87 views
How can I deal with exception handler in Visual C/C++ inline assembly?
I have disassembled a function in IDA Pro and I want to compile it into my project in visual c inline assembly... I'm still a newbie, so let me apologize if I don't use the right terminology...(I'm ...
1
vote
1answer
121 views
Capstone: What's the purpose of the 'address' argument in cs_disasm()?
I'm trying to play around with the Capstone Disassembler in C.
In the documentation they show the following use of the cs_disasm() function:
from here
count = cs_disasm(handle, CODE, sizeof(CODE)-1, ...
1
vote
5answers
236 views
C representation of simple assembly
I have the following very simple X86 assembly:
shr cx, 1
jae short <addr>
So basically, the jump will be taken if the Carry flag is not set. In the case of shr, CF will be set to the value of ...
0
votes
1answer
235 views
Patching branch on assembly code
I compile this code
1. #include <stdio.h>
2. void F(int a, int b)
3. {
4. int c= a+b;
5. int d= a*b;
6. }
7. void printAll()
8. {
9. printf("test1");
10. printf("test2");
11. ...
0
votes
2answers
161 views
explain c compile code
I compile c code to arm with this site https://godbolt.org/
int F(int a, int b)
{
int c=0;
for(int i=0;i<=10;i++)
{
c+=a+b;
}
return c;
}
the result was
F(int, ...
-1
votes
1answer
312 views
help needed to understand this pseudo code from ida and possibly recreate it
I've be on with the application for a while now and have pinpointed some interested functions, I would like to be able to implement them in to another application but I'm not sure how to get them "out"...
1
vote
1answer
170 views
Odd convention for accessing elements of an array?
While reverse engineering a game using the Hex Rays decompiler I was looking for how an array of NPC's was accessed. I found the array but I don't quite understand the unusual formula for getting the ...
3
votes
2answers
339 views
how to find the encryption algorithm?
I have an arm complied so file and find the decrypt function which pseudocode generated by IDA Pro is like this:
char __cdecl EncodeUtil::getDecryptStr()
{
int *v0; // r0
int *v1; // r7
...
1
vote
1answer
233 views
re-construction of c code: movsx with test instruction
I just started learning about reconstructing C code from assembler instructions.
I have the following piece of assembler code:
mov eax dword ptr [ebp+8]
add eax, dword ptr[ebp-4]
movsx ecx, byte ptr ...
1
vote
0answers
63 views
Decompiled code calls a function with unitialized variables
I'm working on decompiling the scripting engine from the game Rayman 2. It's going pretty well, but I'm getting stuck on a particular function which calls another function with arguments that aren't ...
2
votes
1answer
546 views
How can I see the heap data in ollydbg?
I have a C compiled binary that allocates an array of chars into the heap via HeapAlloc().
I would like to be able to see the allocated dynamic array in the heap using Ollydbg to be able to trace it ...
1
vote
0answers
42 views
Is there a static address to a pointer on Mac OS?
Given the sample code below:
#include <iostream>
struct Data {
int a;
int b;
int c;
};
int main() {
Data *d = new Data;
d->a = 1337;
d->b = 1338;
d->c = ...
0
votes
1answer
805 views
What does this assembly instruction do?
push %rbp
mov %rsp,%rbp
mov %rdi,-0x18(%rbp)
mov %rsi,-0x20(%rbp)
mov -0x18(%rbp),%rax
mov (%rax),%eax
mov %eax,-0x4(%rbp)
mov -0x20(%rbp),%rax
mov (%rax),%edx
mov -0x18(%...
0
votes
1answer
135 views
TOKEN structure in Kernel
I would like to know how WinDbg extracts all the user, group, privilege information about a process from a token when given the !token 0xaddress command so I can implement it in my driver code.
...
1
vote
0answers
528 views
How to decrypt .jpg files of comics app in a C Program?
I'm trying to decrypt jpg images of comics I purchased in my comic reader app on android but neither I can view them (after copying from SD card to Windows desktop) nor can I convert them to pdf to ...
1
vote
1answer
677 views
How can I convert a .bin file to either assembly or C?
I have a .bin file (It's a firmware belongs to a hardware (Cisco Access-Point) ). All I need to do is modifying that .bin file.
As you know, .bin files aren't human readable. I need to convert it to ...
4
votes
2answers
1k views
How do I approach this CTF Debugging Program?
I have an ELF executable I'm working on (got it from a previous CTF competition). The executable simply asks for a password, and then it prints out "congrats".
The code snippets and my annotations ...
1
vote
1answer
124 views
Unknown comparison
I'm trying to decompile some singleplayer code for a game (C++ on X86 architecture Linux). I do this with the help of some already available source code, a file (compiled on linux) with debug ...
0
votes
1answer
104 views
IDA: Two calls of a same function
I was reversing some executable and came across to this code:
As I found out later, it's using function pointer to call function sub_4011C0 and that could be the reason.
My question is why does ...
1
vote
2answers
525 views
Understanding an if statement in assembly
I have written two simple C programs (one with an if and one without). Looking at the assembly differences there are a few lines that I can't manage to explain and was hoping to get some assistance. ...
2
votes
2answers
156 views
Exports that redirects to other library
I'm writing an analog of GetProcAddress function. When looking inside the export table I see the exports like this in advapi32.dll for example:
.text:4C362BAA aEventregister db 'EventRegister',0 ;...
5
votes
2answers
280 views
Inverse And operation
I'm trying to write a keygen to a crack me that I'm learning from and I got stuck. What happens there is pretty simple:
Let's say that I entered the password: "12121212"
XOR DWORD PTR DS:[ECX+EAX],...
1
vote
1answer
604 views
Calling Swift 4 methods from C
I have earlier been able to call Swift methods using a function pointer from C, and providing the appropriate arguments because the calling convention was the same.
Unfortunately this no longer works....
1
vote
2answers
528 views
IDA Pro - Applying function signatures
I have three files:
ELF executable,
ELF dynamically linked library (.so),
C headers file (.h) with function signatures and related structures for that library.
#1 imports a number of functions from #...
