New answers tagged c++
0
One way to kind of easily "obfuscate" strings is to store them on the stack.
Example: instead of declaring strings like char string[9] = "MyString" you can store them on the stack by declaring them like char string[9] = {0x4d, 0x79, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x0}. This way the string will be stored in the .text section insted of ...
0
You can write a simple string encoder that rotates around some characters, something like the Caesar cipher.
Just bear in mind that this "encryption" can of course be identified in the disassembly. Since disassemblers search for ASCII characters and nullterminated strings, it could be more difficult to identify the encrypted strings if your ...
0
“Reload input file” only refreshes the byte values, it does not reanalyze the file. So if, for example, you added some functions and the code moved, it may interfere with the existing analysis.
If you don’t actually need to analyze the binary but just debug it, you can used IDA in so called “instant debugging” mode. Open IDA without loading anything, then ...
1
The x86/x64 instruction set is variable length and there are no obvious instruction boundaries. You can make use of a length disassembler to figure out how long each instruction is. There are a bunch of them available, here’s a few I found by a quick search:
https://github.com/greenbender/lend
https://github.com/Nomade040/length-disassembler
https://github....
0
This is a lambda expression. When the lambda expression has captures it is compiled into a implementation defined structure. In my case the lambda has captures, using MSVC the structure was _Func_Base defined as:
#pragma warning(push)
#pragma warning(disable : 4265) // class has virtual functions, but destructor is not virtual (/Wall)
// CLASS TEMPLATE ...
3
IIRC the typeid operator returns a pointer to a type info instance.
Overall the code looks like a lambda expression implementation; the “constructor” captures the context so that the “handler” (lambda body) can access the variables it needs from the outer scope.
Top 50 recent answers are included
