Questions tagged [hexadecimal]
The hexadecimal tag has no summary.
25 questions
0 votes
1 answer
153 views
IDA show decimal values instead of hex and vertical alignment for ELF file
New to de-compiling, want to set up Ida to give best reading experience with ELF files from android phone. I run in following issues: Even though i set Edit > PlugIns > Hex-Rays Decompiler > ...
2 votes
1 answer
634 views
How to get hexadecimal of instruction and distinct value(token) of opcode by ghidra script?
From disassembled code, I want to extract the hexadecimal of instruction, as boxed in the figure below plus, I want to get distinct value of each opcode and its operand, which means sort of mov => ...
0 votes
0 answers
83 views
extracting time latitude and longitude from hexadecimal file
I am working on a GPS dump file. It contains the time as well as position data of a flying object. I am not sure in what units they are and there are no manuals available about the data format. I am ...
1 vote
1 answer
260 views
How to use decimal in x64dbg calculator?
The x64dbg calculator can evaluate hex expressions. Is there a syntax to calculate the sum of a hex value and a decimal value? For the example in the snapshot, is it possible to treat 10 as a decimal?...
2 votes
1 answer
7k views
How to find offset to a function address from the base address in decompiled image (IDA or Ghidra)
Let's say there is a default base address for the application image on both IDA and Ghidra and it is equal to 140 000 000. If the function address is: 140 039 ea0 Does it mean that the offset from the ...
0 votes
1 answer
119 views
Strategies for Deciphering RS-232 Data
I'm working with an old irrigation controller that is connected to a PC via the DB9 serial port. I was able to capture that data (tapped into the appropriate TX wire) on a separate laptop, but now I'm ...
1 vote
0 answers
131 views
Restoring online functionality of an obsucure Korean PS2 horror game
Last year I posted for help in order to reverse-engineer and translate a Korean exclusive Horror game for the Playstation 2 called Mystic Nights. Here is the Original Post. Thanks to the kind folks ...
0 votes
1 answer
612 views
How this Float “4-bytes” is converted to Short_signed “2-bytes”?
Hi, please help me on this problem, I don't understand how this Float "4-bytes" or IEEE 754 floating point, is converted to short_signed "2-bytes". First, I convert the float "4-bytes" hexadecimal to ...
0 votes
1 answer
117 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website. Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
1 vote
1 answer
393 views
Hex editing a program to change variable types
For starters guys please don't get mad at me because I really googled this question for a while and couldn't find a satisfying answer. Also if I'm asking an idiotic question, I apologize beforehand. ...
0 votes
0 answers
502 views
Decipher hexadecimal GPS coordinates from UDP message
I'm trying to get the GPS lat/long data from a UDP message. It's captured on a radio dispatch console on a P25 radio system, if that helps. I captured this UDP message when I sent a simulated ...
4 votes
1 answer
203 views
Help with a pointer
Sorry for this stupid question. It's late here and I've been kinda stuck for a while over this so I hope someone here can answer this easily. In CheatEngine, 028FA190+374 is pointing to 028F1788. ...
3 votes
1 answer
680 views
Decipher variable length serial protocol
I have an ebike consisting of a controller which regulates power to the motor and a smart LCD which can adjust max speed, power output, pedal assist sensitivity etc as well as displaying the current ...
-2 votes
1 answer
19k views
How do I decode this JavaScript code? [duplicate]
Each file starts with the same function: (function(_0x128f83, _0x1ae5b9) { var _0x1b5471 = function(_0x339be5) { while (--_0x339be5) { _0x128f83['push'](_0x128f83['shift']()); ...
0 votes
1 answer
5k views
How decrypt hexadecimal javascript code? [closed]
Someone here already had success to deobfuscate 100% a "hexadecimal" Javascript code? E.g.: var _0x22bc92 = function() { var _0x26938d = !![]; return function(_0x100751, _0x54d399) { ...