Skip to main content
37 votes

Objdump - How to output text (eg ASCII strings) alongside assembly code?

It is assumed here that Linux ELF32 binaries are being analyzed. Code and data such as strings are stored in separate parts of ELF binaries. To disassemble the parts containing code, use objdump -...
julian's user avatar
  • 7,186
4 votes

Converting 16 bit long Hex value to a color

It appears to be stored in byte-reversed order from what you gave with a standard 5-6-5 bit encoding and then scaled to a maximum of 255 for each. 0xC0CF (0b1100000011001111) R: 24 (0b11000) * 255/31 =...
cimarron's user avatar
  • 1,341
4 votes

x86 ASM question about hexadecimal numbers and how to transfer them

Most assemblers require numeric constants to begin with a digit, this is so they can distinguish between them and labels. You can see it in FASM Fundamental syntax rules: Numbers are ...
Megabeets's user avatar
  • 9,009
4 votes

Help with a pointer

It's different, because it isn't just 0x28FA190 + 0x374, but it's *(0x28FA190 + 0x374). 0x28FA190 is a base address, probably of a structure, and 0x374 is an offset, when you sum these values and ...
anx199's user avatar
  • 175
3 votes

How decrypt hexadecimal javascript code?

Those hex values could represent anything. Look for online converters that convert hexadecimal to text (consider various formats), dec, etc. and see if the results make any sense. If not, then they ...
dsasmblr's user avatar
  • 2,234
3 votes

Decoding proprietary 485 comms

I would hardly call this an answer, but I can't comment yet.. You need additional data. Have you tried opening the outdoor unit and examining the board that you're communicating with? you might find ...
Eli K's user avatar
  • 151
2 votes

Decipher variable length serial protocol

I understand your Arduino serves as a relay in the middle between the controller and the LCD. What you could do (not extremely exciting, but you did not mention whether you made similar experiments ...
josh's user avatar
  • 1,974
2 votes

How do I decode this JavaScript code?

You can use this tool to partial deobfuscate that code: In that case I get this: 'use strict'; (function(data, i) { /** * @param {number} isLE * @return {undefined} */ ...
Álvaro Romero's user avatar
2 votes

Decoding proprietary 485 comms

I managed to decode the protocol on XYE connection. My findings are here The XYE connection is the bus between a central controller and the indoor units. The bus from the ...
xye's user avatar
  • 21
2 votes

How to get hexadecimal of instruction and distinct value(token) of opcode by ghidra script?

I'm going to assume you have an Address object (I'll just use currentAddress) . With an address you can get the Instruction at that address. Then read that many bytes from Instruction object. from ...
saquintes's user avatar
  • 136
1 vote

How to use decimal in x64dbg calculator?

Yes, it is. For decimal numbers, use the syntax with the period just before the number, e.g. .10: Particularly, in your case you will obtain exactly what you wanted (I omitted leading zeroes):
MarianD's user avatar
  • 1,130
1 vote

How to find offset to a function address from the base address in decompiled image (IDA or Ghidra)

Found of how it works. The offset is indeed just the difference of the addresses, which can be taken from the static analysis, i.e. from IDA or Ghidra regardless in which address space it loads by ...
Irbis77's user avatar
  • 328
1 vote

How this Float “4-bytes” is converted to Short_signed “2-bytes”?

One word, precision By definition, a normal is a vector with a length of 1.0f which means that each component of the vector will always fall between -1.0f and +1.0f, and UV are texture coordinates ...
Jerry Hundric's user avatar
1 vote

Hex editing a program to change variable types

Yes, it is possible, but by changing instructions, not data. In assembly there is no way to tell that a particular integer variable is signed or unsigned until you interpret it in the one or another ...
bart1e's user avatar
  • 3,409
1 vote

Decoding proprietary 485 comms

The comms on the PQ(E) bus are similar to the XY(E), just with only 10-byte messages. You can sniff the RS-485 traffic with an RS-485 - USB dongle and some serial monitor, connect the A-B lines of the ...
sz22's user avatar
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible