[DiscordArchive] speaking about the debug mode issue and alike, doesn't your RE tool give you ability to see who writ
[DiscordArchive] speaking about the debug mode issue and alike, doesn't your RE tool give you ability to see who writ
Archived author: Skarn • Posted: 2021-04-17T16:21:14.409000+00:00
Original source
speaking about the debug mode issue and alike, doesn't your RE tool give you ability to see who writes to the adress?
Archived author: Skarn • Posted: 2021-04-17T16:21:25.244000+00:00
Original source
the one that is responsibly for enabling those prints
Archived author: stoneharry • Posted: 2021-04-17T16:23:13.878000+00:00
Original source
Maybe, I haven't done that much reverse engineering of assembly like this. I traced it to a subroutine with 250+ inputs that appears to be loading all the various properties, but didn't know where to take it from there
Archived author: Skarn • Posted: 2021-04-17T16:24:39.963000+00:00
Original source
why assembly tho if you have pseudocode?
Archived author: stoneharry • Posted: 2021-04-17T16:25:06.724000+00:00
Original source
The psuedocode isn't that useful when you have v1 through to v250+. You don't know what is at each pointer
Archived author: Skarn • Posted: 2021-04-17T16:25:34.362000+00:00
Original source
theoretically you can patch the instruction right before the print
Archived author: Skarn • Posted: 2021-04-17T16:25:44.419000+00:00
Original source
to e.g. check against true all the time
Archived author: stoneharry • Posted: 2021-04-17T16:26:15.961000+00:00
Original source
I was hoping to potentially patch it to initialise debug mode as true rather than false, might be easier than trying to identify what sets that flag. But yeah, couldn't seem to figure it out
Archived author: Skarn • Posted: 2021-04-17T16:27:08.895000+00:00
Original source
the fact that it debug mode is present probably means it is turned on by some launch argument or something
Archived author: Skarn • Posted: 2021-04-17T16:27:19.444000+00:00
Original source
normally such things are stripped away on compile time