New answers tagged

1 vote

Mov instruction from a pointed location at the beginning of a program

In Intel assembly commonly a leading semi-colon (;) is used to introduce a comment. The comment then continues to the end of the line. The ; can also occur after an instruction, but not in its middle. ...
user avatar
  • 10.5k
1 vote
Accepted

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

Let's break it down. The first and most obvious difference is Intel syntax (dumpbin) vs. AT&T syntax (objdump) for the output you give. That's be the part of your question: Also why is the ...
user avatar
  • 10.5k
1 vote
Accepted

help with Ghidra and rewriting assembly

You need to understand the consequences of patching an instruction. What gets changed by the instruction - both data and control flow. Based on the comments I think you are trying to patch this part ....
user avatar
  • 2,345
0 votes

IDA: Generic approach to determine if an instruction reads from, or writes to, memory?

Updated @tmr232's answer for IDA 7.4+ using a better syntax for printing strings(f-strings): import idaapi import idautils import idc OPND_WRITE_FLAGS = { 0: idaapi.CF_CHG1, 1: idaapi.CF_CHG2,...
user avatar
  • 206

Top 50 recent answers are included