Reverse Engineering for Beginners
CHAPTER 12. CONDITIONAL JUMPS CHAPTER 12. CONDITIONAL JUMPS ldr x1, [sp,8] ldr x0, [sp] cmp x1, x0 bge .L5 ldr x0, [sp,8] b .L6 ...
CHAPTER 12. CONDITIONAL JUMPS CHAPTER 12. CONDITIONAL JUMPS 12.4.3 MIPS. Unfortunately, GCC 4.4.5 for MIPS is not that good: Lis ...
CHAPTER 12. CONDITIONAL JUMPS CHAPTER 12. CONDITIONAL JUMPS 12.5.3 MIPS. Listing 12.36: Check for zero BEQZ REG, label Listing 1 ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT Chapter 13 switch()/case/default 13.1 Small number of cases ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT call _printf add esp, 4 jmp SHORT $LN7@f $LN2@f: push OFFSET ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT Here we can see some dirty hacks. First: the value ofais pla ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT OllyDbg Since this example is tricky, let’s trace it in Olly ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT 0 is subtracted from 2 inEAX. Of course,EAXstill contains 2. ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT DECis executed andEAXnow contains 1. But 1 is non-zero, so t ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT NextDECis executed.EAXis finally 0 and theZFflag gets set, b ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT A pointer to the string “two” is to be written into the stac ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT MOVwrites the pointer to the string at address0x001EF850(see ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT This is the last instruction ofprintf(): Figure 13.7:OllyDbg ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT Now let’s press F7 or F8 (step over) and return...not tof(), ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT .text:000000D4 f1: .text:000000D4 10 B5 PUSH {R4,LR} .text:0 ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT bl puts nop .L32: ldp x29, x30, [sp], 32 ret The type of the ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT or $at, $zero ; load delay slot, NOP jr $t9 la $a0, ($LC3 &a ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT Listing 13.4: MSVC 2010 tv64 = -4 ; size = 4 _a$ = 8 ; size ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT Then the correspondingprintf()is called with argument'two'. ...
CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT OllyDbg Let’s try this example in OllyDbg. The input value o ...
«
4
5
6
7
8
9
10
11
12
13
»
Free download pdf
