Comments (1)
I dug a little deeper. it seems some assembly instructions are totally wrong. for example, I have the following assembly
mov eax, cs:dword_7FF780D2B0A0
it's corresponding HEX is 8B 05 D1 C3 14 00
i checked with an online tool to verify:
https://defuse.ca/online-x86-assembler.htm#disassembly2
and the tools gives out
0: 8b 05 d1 c3 14 00 mov eax,DWORD PTR [rip+0x14c3d1] # 0x14c3d7
which is correct.
now i try to change the address or even reassemble the same instruction with keypatch and it gives me this encoded HEX value
2E A1 A0 B0 D2 80 F7 7F 00 00
first of all this is 4 bytes longer and it's a totally different assembly instruction!
0: 2e a1 a0 b0 d2 80 f7 movabs eax,cs:0x7ff780d2b0a0
7: 7f 00 00
why is this happening and how can i fix it?
edit:
http://shell-storm.org/online/Online-Assembler-and-Disassembler/
another online assembler/disassembler based on key-stone which gives the correct results.
from keypatch.
Related Issues (20)
- keypatch failure
- When the base address is relatively large, the transfer instruction will fail to assemble
- LDR instruction on the issue of the ARM architecture
- keypatch.py does not support Keystone-v0.9.2 HOT 4
- failed while executing plugin
- IDA 7.5 Issue HOT 1
- name 'KS_ARCH_X86' is not defined HOT 2
- Keypatch Syntax Error: Invalid Syntax. Line 97. On IDA Pro 7.5 SP3(Version 7.5.201028) HOT 4
- keypatch plugin doesn't work HOT 1
- da_idaapi.py", line 616, in IDAPython_ExecScript exec(code, g) HOT 6
- error on ida 7.5
- How to assemble instruction like "mov x0, <VariableValue>" ?
- Lockup with high CPU load on malformed input
- keypatch not working in ida version 7.6 can u update it +1
- turn auto-open next instruction off?
- keypatch found invalid assembly
- Unable to generate 32-bit arm assembly hexadecimal bytecode correctly
- Pseudocode incorrect if not using "undo last patching" option of keypath.
- Install issue on MacOS IDA HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from keypatch.