Vostokov Dmitry / Востоков Дмитрий - Foundations of ARM64 Linux Debugging, Disassembling, and Reversing / Основы отладки, дизассемблирования и реверсирования ARM64 Linux [2023, PDF, EPUB, ENG]

Примеры страниц

Оглавление

About the Author ...........................................................................................ix
About the Technical Reviewer ..........................................................................xi
Preface ........................................................................................................xiii
Chapter 1: Memory, Registers, and Simple Arithmetic .........................................1
Memory and Registers Inside an Idealized Computer ..........................................1
Memory and Registers Inside ARM 64-Bit Computer ............................................2
“Arithmetic” Project: Memory Layout and Registers ............................................3
“Arithmetic” Project: A Computer Program ...........................................................5
“Arithmetic” Project: Assigning Numbers to Memory Locations ..............................5
Assigning Numbers to Registers ...........................................................................8
“Arithmetic” Project: Adding Numbers to Memory Cells .......................................9
Incrementing/Decrementing Numbers in Memory and Registers ............................12
Multiplying Numbers ...........................................................................................15
Summary.............................................................................................................18
Chapter 2: Code Optimization .............................................................................19
“Arithmetic” Project: C/C++ Program .................................................................19
Downloading GDB ...............................................................................................20
GDB Disassembly Output – No Optimization .......................................................21
GDB Disassembly Output – Optimization ............................................................27
Summary.............................................................................................................28
Chapter 3: Number Representations....................................................................29
Numbers and Their Representations ...................................................................29
Decimal Representation (Base Ten) ....................................................................30
Ternary Representation (Base Three) ..................................................................30
Binary Representation (Base Two) ......................................................................31
Hexadecimal Representation (Base Sixteen) ......................................................32
Why Are Hexadecimals Used? .............................................................................32
Summary.............................................................................................................34
Chapter 4: Pointers ..............................................................................................35
A Definition..........................................................................................................35
“Pointers” Project: Memory Layout and Registers ..............................................36
“Pointers” Project: Calculations ..........................................................................38
Using Pointers to Assign Numbers to Memory Cells ...........................................39
Adding Numbers Using Pointers .........................................................................46
Incrementing Numbers Using Pointers ...............................................................51
Multiplying Numbers Using Pointers ...................................................................54
Summary.............................................................................................................58
Chapter 5: Bytes, Halfwords, Words, and Doublewords ...........................................59
Using Hexadecimal Numbers ..............................................................................59
Byte Granularity ..................................................................................................60
Bit Granularity .....................................................................................................60
Memory Layout ...................................................................................................61
Summary.............................................................................................................64
Chapter 6: Pointers to Memory .............................................................................65
Pointers Revisited ...............................................................................................65
Addressing Types ................................................................................................65
Registers Revisited .............................................................................................70
NULL Pointers .....................................................................................................70
Invalid Pointers ...................................................................................................70
Variables As Pointers ..........................................................................................71
Pointer Initialization ............................................................................................71
Initialized and Uninitialized Data .........................................................................72
More Pseudo Notation .........................................................................................72
“MemoryPointers” Project: Memory Layout..............................................................73
Summary.............................................................................................................87
Chapter 7: Logical Instructions and PC ...................................................................89
Instruction Format...............................................................................................89
Logical Shift Instructions ....................................................................................90
Logical Operations ..............................................................................................90
Zeroing Memory or Registers.................................................................................91
Program Counter .................................................................................................92
Code Section .......................................................................................................93
Summary.............................................................................................................94
Chapter 8: Reconstructing a Program with Pointers .................................................95
Example of Disassembly Output: No Optimization .................................................95
Reconstructing C/C++ Code: Part 1 ....................................................................98
Reconstructing C/C++ Code: Part 2 ..................................................................100
Reconstructing C/C++ Code: Part 3 ..................................................................102
Reconstructing C/C++ Code: C/C++ Program ......................................................103
Example of Disassembly Output: Optimized Program .............................................104
Summary...........................................................................................................106
Chapter 9: Memory and Stacks ............................................................................107
Stack: A Definition .............................................................................................107
Stack Implementation in Memory ........................................................................108
Things to Remember .........................................................................................110
Stack Push Implementation ..............................................................................111
Stack Pop Implementation ................................................................................111
Register Review ................................................................................................111
Application Memory Simplified .........................................................................112
Stack Overflow ..................................................................................................113
Jumps ...............................................................................................................114
Calls ..................................................................................................................115
Call Stack ..........................................................................................................116
Exploring Stack in GDB .....................................................................................118
Summary...........................................................................................................121
Chapter 10: Frame Pointer and Local Variables ......................................................123
Stack Usage ......................................................................................................123
Register Review ................................................................................................124
Addressing Array Elements ...............................................................................124
Stack Structure (No Function Parameters) .......................................................126
Function Prolog .................................................................................................127
Raw Stack (No Local Variables and Function Parameters) ........................................127
Function Epilog .................................................................................................129
“Local Variables” Project ..................................................................................130
Disassembly of Optimized Executable ..............................................................133
Summary...........................................................................................................134
Chapter 11: Function Parameters ........................................................................135
“FunctionParameters” Project ..........................................................................135
Stack Structure .................................................................................................136
Function Prolog and Epilog ...............................................................................138
Project Disassembled Code with Comments ....................................................139
Parameter Mismatch Problem ..........................................................................144
Summary...........................................................................................................145
Chapter 12: More Instructions .............................................................................147
PSTATE Flags .....................................................................................................147
Testing for 0 ......................................................................................................147
TST – Logical Compare .....................................................................................148
CMP – Compare Two Operands .........................................................................149
TST or CMP? .....................................................................................................150
Conditional Jumps ............................................................................................150
Function Return Value .......................................................................................151
Summary...........................................................................................................152
Chapter 13: Function Pointer Parameters ...........................................................153
“FunctionPointerParameters” Project ...............................................................153
Commented Disassembly .................................................................................154
Summary...........................................................................................................161
Chapter 14: S ummary of Code Disassembly Patterns ............................................163
Function Prolog/Epilog ......................................................................................163
ADR (Address) ...................................................................................................164
Passing Parameters ..........................................................................................164
Accessing Saved Parameters and Local Variables ..................................................165
Summary...........................................................................................................166
Index .............................................................................................................167