New answers tagged assembly
1
vote
Mov instruction from a pointed location at the beginning of a program
In Intel assembly commonly a leading semi-colon (;) is used to introduce a comment. The comment then continues to the end of the line. The ; can also occur after an instruction, but not in its middle.
...
1
vote
Accepted
Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump
Let's break it down. The first and most obvious difference is Intel syntax (dumpbin) vs. AT&T syntax (objdump) for the output you give. That's be the part of your question:
Also why is the ...
1
vote
Accepted
help with Ghidra and rewriting assembly
You need to understand the consequences of patching an instruction. What gets changed by the instruction - both data and control flow.
Based on the comments I think you are trying to patch this part
....
0
votes
IDA: Generic approach to determine if an instruction reads from, or writes to, memory?
Updated @tmr232's answer for IDA 7.4+ using a better syntax for printing strings(f-strings):
import idaapi
import idautils
import idc
OPND_WRITE_FLAGS = {
0: idaapi.CF_CHG1,
1: idaapi.CF_CHG2,...
Top 50 recent answers are included
Related Tags
assembly × 741disassembly × 225
x86 × 136
ida × 122
c × 85
arm × 47
windows × 42
x86-64 × 39
decompilation × 36
ollydbg × 35
c++ × 28
binary-analysis × 27
debugging × 26
malware × 24
memory × 23
disassemblers × 22
shellcode × 20
linux × 18
gdb × 18
elf × 16
register × 14
ghidra × 13
static-analysis × 12
x64dbg × 12
obfuscation × 12