New answers tagged disassembly
2
that is a negative number
C:\>python -c "print(hex(0xffff98b4-2**32))"
-0x674c
or in other words
C:\>python -c "print(hex(2**32 - 0x674c))"
0xffff98b4
0
Use e asm:
e?asm
asm.hint.call: Show call hints [numbers] in disasm
asm.hint.call.indirect: Hints for indirect call intructions go to the call destination
asm.hint.cdiv: Show CDIV hints optimization hint
asm.hint.emu: Show asm.emu hints [numbers] in disasm
asm.hint.imm: Show immediate hints [numbers] in disasm
asm.hint.jmp: ...
0
I found another HP-SOM binary and while it has a similar instruction sequence, it is missing the mysterious addi.
$CODE$:00002D14 27 79 12 00 fstw %fpsr, -4(%dp) # dword_400018DC # Floating-Point Store Word
$CODE$:00002D18 20 A0 00 00 ldil 0, %r5 # Load Immediate Left
$CODE$:00002D1C 34 A5 00 00 copy %...
1
At a guess, the class participates in a virtual inheritance tree. When constructing a class with virtual bases, the constructor needs to know whether its virtual bases have been already constructed or not. The extra argument is used for that. If you compile a sample program with virtual inheritance and look at its assembly output, you'll see that it's called ...
1
So I ran it without the -d parameter but I'm unable to execute the program by dc as the error below is shown
[0x00000610]> dc
Cannot continue, run ood?
radare2 will NOT continue or run the target program's execution because without the -d option, it'll run the program in static analysis mode(Static analysis of a program is the analysis of the code ...
2
In the end, I found how to do it. In Search > Not Function.
2
[0x140012e60]> ps @ 0x1400143f8
Usage: r2 -c '!*r2p x' # run commands via r2pipe
[0x140012e60]> axt 0x1400143f8
main 0x140001253 [DATA] lea rdx, str.Usage:_r2__c__r2p_x__run_commands_via_r2pipe_n
[0x140012e60]> pd 6 @ 0x140001253-10
| 0x140001249 00ff add bh, bh
| 0x14000124b 1500300100 adc eax, 0x13000
| ...
2
0x004006f0 ff2532092000 jmp qword [reloc.callme_three] ; [0x601028:8]=0x4006f6
it already shows in the comment what the symbol means it is 0x4006f6
address the next instruction
for example on an arbitrary disassembly as below
0x140012e7f ff15db110000 call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter];
[0x140014060:8]=0x18d4e ...
0
always post text instead of screen shots as much as possible .
always provide context .
the compilers , operating systems , architectures , headers everything evolve and what might have been correct yesterday might not be correct today .
code with all warnings and analysis enabled as much as possible .
provide a readily compilable code for some one to ...
Top 50 recent answers are included