5
The offsets are listed at the top of the function:
You can also hover over the local variable name for a few seconds to see a popup with the offset.
If you want to permanently disable the variable offset translation, uncheck Markup Stack Variable References under Edit -> Tool Options -> Options -> Listing Fields -> Operands Fields.
2
The first bytes are the exception vectors:
CODE:00000000 LDR PC, =0x1000005C
CODE:00000004 ; ---------------------------------------------------------------------------
CODE:00000004 LDR PC, =0x10000044
CODE:00000008 ; ---------------------------------------------------------------------------
CODE:...
2
OK I think i finally figured it out in that there is a partial code relocation routine in the uboot blob that copies a small part of it to another area of memory, with a different alignment.
This is called from the startup code of uboot before we get going. Init function of this additional code called, though in execution looks like elements of both code ...
1
The charecter that is returned by getch seems to be saved in a local variable var_11 and reused by fputc.
This is seems to be because i cant be sure what the 411159() does
1
Yes, the command echo 0 > /proc/sys/kernel/randomize_va_space disables ASLR. From here:
The value shown will be one of the following:
0 = Disabled
1 = Conservative Randomization
2 = Full Randomization
There are several differences in the implementation of ASLR between Windows and Linux, you can search for them online, but to your question: In Windows, ...
Only top voted, non community-wiki answers of a minimum length are eligible
