Questions tagged [powerpc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

How does `bne` know which bit field in the condition register to branch on? (PowerPC Gekko)

I'm currently reversing a PowerPC Gekko program and saw a bne instruction that branched on the condition register after a rlwinm function. Perfect. That makes sense. bne is checking the third bit of ...
user avatar
0 votes
0 answers
24 views

Reverse engineering Powermac G4 Cube firmware

I need help. I am neither a programmer, nor an electrical engineer, but I am willing to learn if I only knew where to start. The G4 Cube was famous for having no internal audio. However I have found ...
user avatar
0 votes
1 answer
101 views

MPC562 and M58BW016 Flash operations

I am trying to modify the Flash memory of a board with a Freescale MPC562 processor, using an external 2 MB Flash chip M58BW016. So far I've been able to successfully read and write the chip's ...
user avatar
  • 21
0 votes
2 answers
118 views

calculate branch target address powerpc

I want to know how next instruction address (NIA) is calculated for BL instruction. Lets assume that there is such instruction: .text:100004C8 BL sub_10000670. This command in hex is: 48 00 01 ...
user avatar
  • 111
2 votes
1 answer
931 views

PowerPC TOC and SDA

I'm trying to understand the concepts of the TOC and SDA in PowerPC. From what I understand, they are basically pointers to tables of global values, when TOC is stored in r2, and SDA in r13. But ...
user avatar
1 vote
1 answer
196 views

vector table address in mpcXXXX microcontrollers

I'm disassembling some mpcXXXX microcontroller firmware, and I'm trying to find the vector table and the reset interrupt. For example, I know that in ARM, in some of the microcontrollers, the vector ...
user avatar
2 votes
1 answer
291 views

PowerPC ELF32 detecting VLE

I am writing an ELF32 parser and disassembler for PowerPC. Does anyone knows how to detect if the file is using VLE architecture from ELF header? I see that IDA can do it automatically.
user avatar
  • 357
1 vote
0 answers
141 views

moving info from one register to another using dot, powerpc

There are three simple instructions from Power PC assembly: mr. r7, r3 li r3, 0 beqlr Well, if i understand here all lines correctly, i move value from register r3 to r9, load r3 with 0 and jump to ...
user avatar
  • 111
1 vote
1 answer
130 views

Powermac gdbserver wrapper/How to attach IDA to powermac application?

How do I debug a powermac application using gdbserver provided there is no gdbserver I've tried compiling various version of gdb found in apple opensource -specifically the gdbserver part but it ...
user avatar
  • 383
2 votes
0 answers
2k views

IDA Pro PowerPC Decompiler Plugin supporting Floating Point Instructions

So I far I have been using Snowman for PowerPC decompilation. It is bad though but better than nothing. However, right now it doesn't support floating point instructions. They are simply written down ...
user avatar
4 votes
2 answers
761 views

IDA Pro: Define local variables from non-standard powerpc stack register

I am using IDA pro 6.95 (paid version) to RE some PowerPC code. The PowerPC normally uses r1 as the stack pointer, so IDA builds the stack frame and local variables from r1. Parameters are passed in ...
user avatar
1 vote
1 answer
75 views

Copy Export Symbols From Mac to Windows PE

I have both a Mac and Windows version of the same library. However, while the Mac version has export symbols, the Windows version exports by ordinal. The Mac version uses the PPC architecture making ...
user avatar
2 votes
1 answer
717 views

PowerPC reversing finding the SDA and the TOC

For PowerPCs how do you find out the TOC address or the SDA address? Like for example in this case.
user avatar
  • 105
1 vote
2 answers
2k views

Set register to specific value for use in autoanalysis in IDA Pro 6.9

I'm using IDA Pro 6.9 with some PowerPC disassembly. The code sets up r13 to a value, say 0x10000, then offsets that register to load and store memory in that region. r13 is never modified again in ...
user avatar
  • 13
1 vote
1 answer
323 views

Append Code To Text Segment With Global Variables?

I have a powerpc computer that takes ELF files for its code. I have made a tool that allows me to extract and inject segments successfully, but I am missing a small piece of information regarding the ...
user avatar
  • 161
1 vote
1 answer
259 views

Can PowerPC64 ELF file have 32-bit pointers?

I've been given an ELF binary file which self describes as PowerPC 64-bit. The e_entry field of the ELF header points to the beginning of a section called .opd. According to this specification, it is ...
user avatar
2 votes
2 answers
1k views

Disassemble the Decompression method (PowerPC ASM)

Continues from Unknown game data compression method (Gamecube) I have compression data which was start with: [ * SK_ASC* ] and unknown compression method.The list below compression method that I ...
user avatar
  • 43
1 vote
1 answer
629 views

Why does the PowerPC Compiler emit a clclr instruction before calling a function?

I disassemble my own written code in C to PowerPC assembly, and I can't understand why crclr occurrs before the call to the printf function. C code int main() { int a, b, c; a = 10; b ...
user avatar