New answers tagged assembly
2
Looks like you also asked the question over on the Ghidra GitHub page and the answer there is the same.
Essentially, no, Ghidra does not do that. But you should investigate Angr, Klee, Bitblaze, or others.
3
What can i do to get results like book?
Just use the same version of the compiler and compile the code for the same architecture as the Author. Usually, there is explicitly stated which compiler version was used to get a particular assembly. For example:
or
So, there are several different versions of compiler used and if you want to get the same results, ...
1
I changed call strlen to call printf and got my flag. I am so happy and proud of myself.
2
Since the external modules may be loaded at an address not known until runtime, a specific address can't be used, so the information about external calls is not encoded in the instruction themselves (the bytes used are just placeholders) but in the separate section of the New Executable (NE) called Module-reference table combined with the relocation fixup ...
3
The opcode you are interested in is a9 01 00 00 00 standing for test eax, 1.
The easiest way to get the opcode of assembly instruction is just to compile it and disassemble the result (for example using nasm and then objdump or simply this site) - this way you don't have to remember anything about the opcodes which are sometimes weird.
However, you want ...
Top 50 recent answers are included
