All Questions
Tagged with disassembling or disassembly
1,681 questions
0 votes
1 answer
43 views
Disassembly view in Xcode: how can I symbolicate a function's address?
In Xcode, I set a breakpoint to a function which is a part of an iOS framework and the disassembly view showed up. All function calls except one (0x1bb286280) were symbolicated (i.e. Xcode showed the ...
1 vote
2 answers
227 views
How does MSVC's optimized asm implement a simple C program that uses strcpy on argv[1]? Understanding IDA output and what it's doing with pointers?
I have written a very basic int main program as shown below: #include <stdio.h> #include <windows.h> int main(int argc, char** argv) { char buffer[500]; strcpy(buffer, argv[1]); ...
2 votes
0 answers
69 views
Bypassing C64's PETSCII to screen code mapping
In upper-case mode, the C64 PRINT ASC("A") prints 65 - the ASCII/PETSCII code. But POKE 1024,65 prints the shifted A character. PRINT CHR$(65), however, prints the proper 'A' character. With ...
0 votes
1 answer
223 views
IDA Pro 9.1 displaying wrong values of local variables in locals window
Could you please advise on how to resolve the issue with variable display in the Locals window during debugging? When execution is halted at a breakpoint at the beginning of a function, the variables ...
2 votes
1 answer
103 views
why is there a "RETF 4" at the end of the disassembled function?
im disassembling the old 1989 Borland tool TDSTRIP.EXE that can extract Turbo Debugger information from executables and stumpled over this path-normalizing function this is the signature im using ...
0 votes
0 answers
60 views
Finding global variables in ARM disassembly
My question is related to In the ARM ABI, how are global variables accessed? but is somewhat different. I'm trying to debug an issue and for that I went looking in the build outputs of my project. I ...
0 votes
0 answers
82 views
Disassembling multiple files in IDA Pro using Python
I am quite new in IDA Pro. I am trying to disassemble multiple .exe files and save the assembly codes as .asm files. I tried to write a Python script for that. But I don't know how to load an .exe ...
2 votes
1 answer
177 views
Export the Disassembly file(s) from Keil uVision 5
When I'm debugging in uVision 5 the Disassembly window shows the interleaved source code and assembly instructions and the index of the current executed instruction. I need this window exported in a ...
0 votes
1 answer
466 views
How to Debug a Process Launched by Another Application with IDA
I'm learning reverse engineering with IDA Pro and debugging a launcher application (start.exe) that launches another executable (main.exe). start.exe takes two inputs (call them X and Y), processes ...
2 votes
1 answer
169 views
Is There A Way To Force NASM To Emit Opcode 0x82 In 8086 Mode
Problem I'm using NASM as a reference assembler for an 8086 disassembler project I'm working on. To increase test coverage I'm looking for an assembly instruction and/or command line flag that will ...
3 votes
0 answers
93 views
Stack alignment and argument accessing in disassembly? [duplicate]
Kind note: This question does not relate to ARM assembly. I used the Android tag, and I am adding this for clarity. I know how assembly works, but I am new to disassembly, especially accessing the ...
0 votes
1 answer
58 views
How to map runtime address from /proc/pid/maps to binary executable?
With a binary executable and a /proc/pid/maps of a process which spawns from it, I want to map a runtime instruction address at this time (can be retrieved by gdb or any debuggers) towards the ...
1 vote
1 answer
177 views
8086 memory to accumulator encoding: why do mov al, [absolute] and mov ah, [absolute] have different sizes?
mov al, [10] ; a0 0a 00 mov ah, [10] ; 8a 26 0a 00 After assembling the above 8086 assembly code using NASM, I noticed a length disparity in the resulting machine code (shown in the comments above ...
1 vote
2 answers
89 views
Why does the disassembly of this function show a two-operand idiv?
I wrote the following C program: #include "stdio.h" __declspec(noinline) void DivideTest(int num, int denom) { int quo = num / denom; int rem = num % denom; printf("...
1 vote
0 answers
22 views
Disassembly output of data and rodata sections (x86_64, nasm) [duplicate]
I've been playing a bit with assembly for a while and I think I have an okay grasp on it. I can write simple things in it, and I can read it okay. Now I want to try a bit of machine code. So, I wrote ...