Replies: 1 comment
-
Use an
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I'm reversing a program that allocates a memory range where it stores its state flags.
Example use scenario:
I've assigned a custom type
ProgramStateFlags
to the variablepPVar2
. This struct has fields for the size and thebyte*
pointer to the allocated memory zoneflags
. As you could have guessed, the flags are stored in the compressed form that optimizes the size.I can now manually figure out what's going on here by
0xef
to0b11101111
, checking that it has a single bit set to false, that is, the bit with index 4 (right to left)0x1cd * 8 + 4 == 0xE6C == 3692
disable FLAG[3692];
Is this the best option I've got? I was hoping for some bitvector/bitset types.
Beta Was this translation helpful? Give feedback.
All reactions