1

I'm new to reverse, my question may be stupid. I am trying to reverse a function in the application that reads a string at the address and concatenate it to another

char[250] v30;
char[20] v31;
...
memcpy(v31, &unk_1ABB65, 20);
strcat(v30, v31);

I tried to read the bytes at this address and concluded that the bytes go beyond ASCII and tried to apply various encodings including extended ASCII, but I didn't get any normal result. Maybe the address changes in runtime (no other references), or does this address point to RAM or NVRAM? I don't understand. Thanks for the help!

Improve this question
1
  • Read up on stack variable lifetimes. The memory values will only be valid while those instructions are executing. Keep in mind that localized optimizations may reuse stack space when things are no longer used. Commented Mar 25, 2024 at 15:16

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.