You fix this by just selecting all the (conveniently auto-grouped) .text symbols in the symbol view and hitting Delete. This is the result.pic.twitter.com/onLoMp6kJS
Show this thread
That crackme is unstripped and *actually* has a ton of ".text" symbols pointing at every function. My guess is it was compiled with -ffunction-sections and that left behind a ton of garbage. Ghidra isn't wrong here, it imports both, decompiler just picked one.https://twitter.com/trufae/status/1103342657701638144 …
-
-
-
If you *really* want to punish yourself by using radare, go nuts, but this is probably not the right reason to pick it over Ghidra ;-)
Show this thread
End of conversation
New conversation -
-
-
If I understood correctly it's a tool released by the Neverending Spy Agency. Can we really trust it being safe?
-
Yes. It's (partially, soon fully) open source. The shitstorm if it were backdoored would be massive. People would figure it out in hours. Android's security is based on software developed by the NSA. There are times where they are not to be trusted. This isn't one of them.
- Show replies
New conversation -
-
-
i'm not saying ghidra is wrong, its just picking the wrong "label", the r2dec output is not better, and in fact i was using two different binaries, so the whole example was kindof useless. All the tools have lot to learn from each other, but you can keep up with the shitstorm
-
How is *Hector* creating a shitstorm here?
- Show replies
New conversation -
-
-
That says he decompiled two separate binaries too (crackme0x00.exe vs crackme0x01.exe)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.