Reverse Engineering for Beginners

INDEX INDEX

S-registers, 214 , 899
soft float, 215
ARM64
lo12, 47
ASLR, 673
AWK, 642

Base64, 634
base64, 635
bash, 99
BASIC
POKE, 646
binary grep, 639 , 707
BIND.EXE, 677
binutils, 364
Bitcoin, 860
Borland C++Builder, 627
Borland Delphi, 627 , 631 , 857
BSoD, 662
BSS, 674

C11, 657
Callbacks, 368
Canary, 269
cdecl, 35 , 649
COFF, 738
column-major order, 279
Compiler intrinsic, 28 , 858
CRC32, 438 , 452
CRT, 669 , 688
Cygwin, 626 , 630 , 678 , 705

DES, 391 , 404
dlopen(), 667
dlsym(), 667
DOSBox, 812
DosBox, 644
double, 206 , 654
dtruss, 705
Duff’s device, 466

EICAR, 808
ELF, 71
Error messages, 635

fastcall, 11 , 58 , 291 , 650
float, 206 , 654
Forth, 608
FORTRAN, 279 , 491 , 572 , 627
FreeBSD, 638
Function epilogue, 23 , 47 , 48 , 127 , 348 , 642
Function prologue, 9 , 23 , 26 , 48 , 269 , 642
Fused multiply–add, 94 , 95
Fuzzing, 481

GCC, 626 , 903 , 906
GDB, 21 , 40 , 44 , 268 , 376 , 377 , 704 , 906
Glibc, 376 , 662

HASP, 638
Hex-Rays, 723
Hiew, 84 , 124 , 631 , 674 , 675 , 678 , 857

IDA, 78 , 364 , 490 , 618 , 633 , 845 , 905
var_?, 48 , 66
IEEE 754, 206 , 301 , 360 , 412 , 879

Inline code, 182 , 299 , 482 , 529 , 559

Integer overflow, 97

Intel

8080, 197

8086, 197 , 299 , 747

Memory model, 582 , 869

8253, 811

80286, 747 , 869

80386, 299 , 869

80486, 206

FPU, 206

Intel C++, 8 , 392 , 859 , 870 , 888

Itanium, 866

Java, 587

jumptable, 157 , 165

Keil, 12

kernel panic, 662

kernel space, 662

LD_PRELOAD, 666

Linux, 292 , 664 , 795

libc.so.6, 291 , 376

LLVM, 12

long double, 206

Loop unwinding, 176

Mac OS Classic, 731

MD5, 438 , 637

MFC, 675 , 782

MIDI, 637

MinGW, 626

minifloat, 427

MIPS, 4 , 518 , 645 , 674 , 731

Global Pointer, 18

Instructions

ADD, 97

ADD.D, 217

ADDIU, 19 , 76

ADDU, 97

AND, 301

BC1F, 253

BC1T, 253

BEQ, 88 , 129

BLTZ, 133

BNE, 129

BNEZ, 167

BREAK, 471

C.LT.D, 253

DIV.D, 217

J, 6 , 19

JAL, 97

JALR, 19 , 97

JR, 156

LB, 186

LBU, 186

LI, 429

LUI, 19 , 76 , 217 , 304 , 429

LW, 19 , 67 , 76 , 156

LWC1, 217

MFC1, 220

MFHI, 97 , 471 , 901

MFLO, 97 , 471 , 901

MTC1, 366