Can a stack exchange objdump disassemble an unknown architecture?
– Reverse Engineering Stack Exchange objdump: can’t disassemble for architecture UNKNOWN! I am trying to use objdump -d fileName on a s-rec file and it returns unknown architecture, however it recognizes fileName: file format srec I looked at objdump –help and under supported targets srec and symbolsrec is listed.
When to use objdump-I in binutils?
Use objdump -i to list the processors and file formats supported by your build . You may need to make a custom binutils build to support your target CPU. In case this ends up being useful for anyone else, I had the same exact error, but it was in a cross-compilation project.
How to disassemble elf in objdump SH4?
Note you aren’t reconstructing the original elf but just one that resembles enough of the original to work in some tools. If you specify the target object file as binary with the parameter “-b binary” you can disassemble raw binaries. You will also need to specify a machine type with “-m “.
Which is SREC format does objdump use?
SREC (aka S-Record) format is similar to raw binary – it contains just the byte values but, unlike ELF, no metadata about the CPU or OS used. Use objdump -i to list the processors and file formats supported by your build . You may need to make a custom binutils build to support your target CPU.
What’s the idea of the reverse engineering challenge?
Basically, the idea is to using regex and conditional operation to filter out all the unnecessary strings then xor them to get the flag. But somehow there are some value that didn’t get xor at all. So, you have to figure it out by yourself to cope with such a situation 😀 After everything was done correctly, a base64 encoded strings appeared.
What does binary look like in reverse engineering challenge?
After glancing through the assembly codes, the binary looks like it will receive a file as a parameter and read it. It has a check and goodboy function looks that looks suspicious that will need further investigation on it. The code snippet on the left is the check function.