Reverse Engineering for Beginners

CHAPTER 22. UNIONS CHAPTER 22. UNIONS Chapter 22 Unions C/C++unionis mostly used for interpreting a variable (or memory block) o ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS union uint32_t_float { uint32_t i; float f; }; float float_rand() { union uint32_t_float t ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS call _printf add esp, 12 dec esi jne SHORT $LL3@main xor eax, eax pop esi ret 0 _main ENDP ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS lw $t9, (time & 0xFFFF)($gp) or $at, $zero ; load delay slot, NOP jalr $t9 move $a0, $ ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS LDR R0, =aF ; "%f" ; convert float type value into double type value (printf() will need i ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS v.f=start; v.i++; return v.f-start; } void main() { printf ("%g\n", calculate_machine_epsi ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS ARM64 has no instruction that can add a number to a FPU D-register, so the input value (th ...

CHAPTER 22. UNIONS CHAPTER 22. UNIONS As an exercise, you can try to compile this function and to understand, how it works. Ther ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS Chapter 23 Pointers to functions A pointer to a function, as ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS 21 { 22 int numbers[10]={1892,45,200,-98,4087,5,-12345,1087, ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS Listing 23.2: MSVCR80.DLL .text:7816CBF0 ; void cdecl qsort( ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS 23.1.1 MSVC + OllyDbg Let’s load our example into OllyDbg an ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS By tracing (F8) until theRETNinstruction and pressing F8 one ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS Here is also a screenshot of the moment of the second call o ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS EAX=0x00000005 ECX=0xffffcfc7 EAX=0xffffff9e ECX=0x00000005 ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS 23.1.3 MSVC + tracer (code coverage) We can also use the tra ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS comp()function: public comp comp proc near arg_0 = dword ptr ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS Breakpoint 1, comp (_a=0xbffff0f8, _b=_b@entry=0xbffff0fc) a ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS 0x08048472 <+37>: jmp 0x804848e <comp+65> 0x0804 ...

CHAPTER 23. POINTERS TO FUNCTIONS CHAPTER 23. POINTERS TO FUNCTIONS eip 0x8048469 0x8048469 <comp+28> eflags 0x286 [ PF SF ...