Twitter Updates

    follow me on Twitter

    List for 4.5% and get 1% cash back on your purchase

    Wednesday, April 15, 2020

    Reversing Some C++ Io Operations

    In general decompilers are not friendly with c++ let's analyse a simple program to get familiar with it.
    Let's implement a simple code that loads a file into a vector and then save the vector with following functions:

    • err
    • load
    • save
    • main


    Lets identify the typical way in C++ to print to stdout with the operator "<<"


    The basic_ostream is initialized writing the word "error" to the cout, and then the operator<< again to add the endl.




    The Main function simply calls  "vec = load(filename)"  but the compiler modified it and passed the vector pointer as a parámeter. Then it bulds and prints "loaded  " << size << " users".
    And finally saves the vector to /tmp/pwd and print "saved".
    Most of the mess is basically the operator "<<" to concat and print values.
    Also note that the vectors and strings are automatically deallocated when exit the function.


    And here is the code:


    Let's take a look to the load function, which iterates the ifs.getline() and push to the vector.
    First of all there is a mess on the function definition, __return_storage_ptr is the vector.
    the ifstream object ifs is initialized as a basic_ifstream and then operator! checks if it wasn't possible to open the file and in that case calls err()
    We see the memset and a loop, getline read a cstr like line from the file, and then is converted to a string before pushing it to the vector. lVar1 is the stack canary value.

    In this situations dont obfuscate with the vector pointer vec initialization at the begining, in this case the logic is quite clear.



    The function save is a bit more tricky, but it's no more than a vector iteration and ofs writing.
    Looping a simple "for (auto s : *vec)" in the decompiler is quite dense, but we can see clearly two write, the second write DAT_0010400b is a "\n"



    As we see, save implememtation is quite straightforward.




    More info


    1. Hacking Apps
    2. Hack Tools For Games
    3. Tools For Hacker
    4. Black Hat Hacker Tools
    5. Physical Pentest Tools
    6. Hack Tools
    7. Hack Tools For Mac
    8. Hacker Tools 2019
    9. How To Hack
    10. Hack Tools For Ubuntu
    11. Pentest Recon Tools
    12. Free Pentest Tools For Windows
    13. Easy Hack Tools
    14. Pentest Tools Url Fuzzer
    15. Pentest Tools Subdomain
    16. Pentest Tools Find Subdomains
    17. Hacking Tools Github

    No comments:

    Post a Comment

    Home for sale- $2,000 rebate!

    Ready Real Estate slide show

    Become a fan of my page

    Sheree Dutton, Reatlor, DFW, Texas on Facebook
    Powered By Blogger

    Pandora Faves

    Back on the market, price reduced, 1% cash back rebate offered

    Sheree Dutton | Ready Real Estate | 817-975-0461
    222 Birchwood, Azle, TX
    Back on the market, price reduced and 15 cash back rebate offered!
    3BR/2BA Single Family House
    offered at $102,500
    Year Built 2006
    Sq Footage 1,142
    Bedrooms 3
    Bathrooms 2 full, 0 partial
    Floors 1
    Parking 3 Covered spaces
    Lot Size .225 acres
    HOA/Maint $0 per month

    DESCRIPTION


    Wow, talk about pride of ownership! This house has too many upgrades to count, and is so well cared for. You must see it to believe it! A lot of value in this perfect starter home.

    OPEN HOUSE SUNDAY MAY 3RD 2+5 pm

    see additional photos below
    PROPERTY FEATURES

    - Central A/C - Central heat - Fireplace
    - High/Vaulted ceiling - Walk-in closet - Tile floor
    - Living room - Breakfast nook - Dishwasher
    - Refrigerator - Stove/Oven - Microwave
    - Laundry area - inside - Balcony, Deck, or Patio - Yard

    OTHER SPECIAL FEATURES

    - 1 car garage, covered carport for 2 cars
    - covered wood deck in backyard
    - gutters
    - storage shed
    - newly stained wood fence
    - electric fireplace added, with tile hearth
    - upgraded ceiling fans and light fixtures
    - island in kitchen

    ADDITIONAL PHOTOS


    Fantastic curb appeal

    covered wood deck in back

    living room

    kitchen with island

    breakfast nook

    master bedroom
    Contact info:
    Sheree Dutton
    Ready Real Estate
    817-975-0461
    For sale by agent/broker

    powered by postlets Equal Opportunity Housing
    Posted: Sep 11, 2009, 7:31am PDT

    Blog Archive