37
votes
Objdump - How to output text (eg ASCII strings) alongside assembly code?
It is assumed here that Linux ELF32 binaries are being analyzed.
Code and data such as strings are stored in separate parts of ELF binaries.
To disassemble the parts containing code, use objdump -...
- 7,236
4
votes
Accepted
Converting 16 bit long Hex value to a color
It appears to be stored in byte-reversed order from what you gave with a standard 5-6-5 bit encoding and then scaled to a maximum of 255 for each.
0xC0CF (0b1100000011001111)
R: 24 (0b11000) * 255/31 =...
- 1,341
4
votes
x86 ASM question about hexadecimal numbers and how to transfer them
Most assemblers require numeric constants to begin with a digit, this is so they can distinguish between them and labels.
You can see it in FASM Fundamental syntax rules:
Numbers are ...
- 9,019
4
votes
Help with a pointer
It's different, because it isn't just 0x28FA190 + 0x374, but it's *(0x28FA190 + 0x374).
0x28FA190 is a base address, probably of a structure, and 0x374 is an offset, when you sum these values and ...
- 175
3
votes
Accepted
How decrypt hexadecimal javascript code?
Those hex values could represent anything. Look for online converters that convert hexadecimal to text (consider various formats), dec, etc. and see if the results make any sense. If not, then they ...
- 2,254
2
votes
Accepted
Decipher variable length serial protocol
I understand your Arduino serves as a relay in the middle between the controller and the LCD. What you could do (not extremely exciting, but you did not mention whether you made similar experiments ...
- 1,974
2
votes
How do I decode this JavaScript code?
You can use this tool to partial deobfuscate that code: http://jsnice.org/
In that case I get this:
'use strict';
(function(data, i) {
/**
* @param {number} isLE
* @return {undefined}
*/
...
2
votes
Decoding proprietary 485 comms
I managed to decode the protocol on XYE connection. My findings are here https://codeberg.org/xye/xye
The XYE connection is the bus between a central controller and the indoor units. The bus from the ...
- 21
2
votes
Accepted
How to get hexadecimal of instruction and distinct value(token) of opcode by ghidra script?
I'm going to assume you have an Address object (I'll just use currentAddress) .
With an address you can get the Instruction at that address. Then read that many bytes from Instruction object.
from ...
- 136
1
vote
Accepted
How to use decimal in x64dbg calculator?
Yes, it is.
For decimal numbers, use the syntax with the period just before the number, e.g. .10:
Particularly, in your case you will obtain exactly what you wanted (I omitted leading zeroes):
- 1,132
1
vote
Accepted
How to find offset to a function address from the base address in decompiled image (IDA or Ghidra)
Found of how it works.
The offset is indeed just the difference of the addresses, which can be taken from the static analysis, i.e. from IDA or Ghidra regardless in which address space it loads by ...
- 328
1
vote
How this Float “4-bytes” is converted to Short_signed “2-bytes”?
One word, precision
By definition, a normal is a vector with a length of 1.0f which means that each component of the vector will always fall between -1.0f and +1.0f, and UV are texture coordinates ...
1
vote
Accepted
Hex editing a program to change variable types
Yes, it is possible, but by changing instructions, not data. In assembly there is no way to tell that a particular integer variable is signed or unsigned until you interpret it in the one or another ...
- 3,419
1
vote
Decoding proprietary 485 comms
The comms on the PQ(E) bus are similar to the XY(E), just with only 10-byte messages.
You can sniff the RS-485 traffic with an RS-485 - USB dongle and some serial monitor, connect the A-B lines of the ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible