Reverse Engineering for Beginners

INDEX INDEX

MUL.D, 217
MULT, 97
NOR, 199
OR, 21
ORI, 301 , 429
SB, 186
SLL, 167 , 201 , 320
SLLV, 320
SLT, 129
SLTIU, 167
SLTU, 129 , 130 , 167
SRL, 205
SUBU, 133
SW, 54
Pseudoinstructions
B, 184
BEQZ, 130
L.D, 217
LA, 21
LI, 6
MOVE, 19 , 75
NEGU, 133
NOP, 21 , 75
NOT, 199
Registers
FCCR, 253
HI, 471
LO, 471
Branch delay slot, 6
Global Pointer, 284
Load delay slot, 156
O32, 54 , 58 , 901
MS-DOS, 270 , 579 , 637 , 644 , 646 , 672 , 747 , 808 , 810 , 832 ,
857 , 869 , 879 , 889 , 893
DOS extenders, 869
MSVC, 904 , 906

Name mangling, 523
Native API, 673
NEC V20, 812

objdump, 364 , 666 , 678
OEP, 672 , 677
opaque predicate, 520
OpenMP, 628 , 860
OpenWatcom, 627 , 651

Page (memory), 402
Pascal, 631
PDP-11, 425
PowerPC, 4 , 18 , 731
puts() instead of printf(), 15 , 64 , 98 , 125

Quake III Arena, 367

Raspberry Pi, 12
ReactOS, 685
Register allocation, 404
Relocation, 16
row-major order, 279
RVA, 672

SAP, 625 , 790
SCO OpenServer, 738
Scratch space, 653

Security cookie, 269 , 691

Security through obscurity, 635

SHA1, 438

SHA512, 860

Shadow space, 92 , 93 , 413

Shellcode, 519 , 662 , 673 , 809 , 896

Signed numbers, 116 , 432

SIMD, 412 , 489

SSE, 412

SSE2, 412

stdcall, 649 , 857

strace, 666 , 705

syscall, 291 , 662 , 705

TCP/IP, 435

thiscall, 523 , 525 , 651

thunk-functions, 16 , 676 , 732 , 740

TLS, 270 , 657 , 674 , 677 , 882

Callbacks, 660

Callbacks, 678

tracer, 178 , 373 , 375 , 630 , 640 , 644 , 687 , 696 , 704 , 792 , 799 ,

803 , 805 , 857

UFS2, 638

Unicode, 632

Unrolled loop, 182 , 272 , 486

uptime, 666

USB, 733

user space, 662

UTF-16LE, 632 , 633

UTF-8, 632

VA, 672

Watcom, 627

Windows, 700

API, 879

IAT, 673

INT, 673

KERNEL32.DLL, 290

MSVCR80.DLL, 369

NTAPI, 710

ntoskrnl.exe, 795

PDB, 625 , 674 , 710 , 718 , 790

Structured Exception Handling, 29 , 678

TIB, 270 , 678 , 882

Win32, 290 , 633 , 666 , 672 , 869

GetProcAddress, 677

LoadLibrary, 677

Ordinal, 675

RaiseException(), 678

SetUnhandledExceptionFilter(), 680

Windows 2000, 673

Windows 3.x, 575 , 869

Windows NT4, 673

Windows Vista, 672 , 710

Windows XP, 673 , 677 , 718

Wine, 685

Wolfram Mathematica, 473 , 474 , 725 , 826

x86

Flags

CF, 887 , 889 , 891 , 894

DF, 891 , 894

IF, 891 , 894