Benign arch Download

redumper 727-1

Source contains an unconditional loopSource contains low-bit mask syntax
SHA-256429403f8be5d01c5bddb08bb0a5eea5d1998f15ed9b68d26331755044d4ef9c2

Evidence

GitHub archive refs download URL PKGBUILD · lines 17–27
17makedepends=(
18 base-devel
19 cmake
20 ninja
21 llvm
22 clang
23 lld
24)
25source=(
26 "$pkgname-$pkgver.tar.gz::https://github.com/superg/redumper/archive/refs/tags/b$pkgver.tar.gz"
27)
Declares a fixed sixteen-byte array test_misc.cc · lines 14–33
14:62… ==
15
16TEST(IsZeroed, Empty)
17{
18 uint8_t data[1] = { 0xFF };
19 EXPECT_TRUE(is_zeroed(data, 0));
20}
21
22
23TEST(IsZeroed, AllZeros)
24{
25 uint8_t data[16] = {};
26 EXPECT_TRUE(is_zeroed(data, sizeof(data)));
27}
⋯6 lines
C/C++ unit-test EXPECT_EQ marker test_misc.cc · lines 57–63
57:33… ===============================
58
59TEST(BitsReflect, Uint8)
60{
61 EXPECT_EQ(bits_reflect<uint8_t>(0x00), 0x00);
62 EXPECT_EQ(bits_reflect<uint8_t>(0xFF), 0xFF);
63 EXPECT_EQ(bits_reflect<uint8_t>(0x80) …
Contains Hiragana or Katakana script psx.ixx · lines 197–211
197:20… <std::string> entries;
198
199 // taken from DIC
200 const char ANTIMOD_MESSAGE_EN[] = " SOFTWARE TERMINATED\nCONSOLE MAY HAVE BEEN MODIFIED\n CALL 1-888-780-7690";
201 // string is encoded with Shift JIS
202 // clang-format off
203 const uint8_t ANTIMOD_MESSAGE_JP[] =
204 {
205 // 強制終了しました。
206 0x8b, 0xad, 0x90, 0xa7, 0x8f, 0x49, 0x97, 0xb9, 0x82, 0xb5, 0x82, 0xdc, 0x82, 0xb5, 0x82, 0xbd, 0x81, 0x42, 0x0a,
207 // 本体が改造されている
208 0x96, 0x7b, 0x91, 0xcc, 0x82, 0xaa, 0x89, 0xfc, 0x91, 0xa2, 0x82, 0xb3, 0x82, 0xea, 0x82, 0xc4, 0x82, 0xa2, 0x82, 0xe9, 0x0a,
209 // おそれがあります。
210 0x82, 0xa8, 0x82, 0xbb, 0x82, 0xea, 0x82, 0xaa, 0x82, 0xa0, 0x82, 0xe8, 0x82, 0xdc, 0x82, 0xb7, 0x81, 0x42
211 …
Calls native open or sys_open sptd.ixx · lines 127–132
127:59… (MACH: {})", mach_error_string(kret));
128
129#else
130 _handle = open(drive_path.c_str(), O_RDWR | O_NONBLOCK | O_EXCL);
131 if(_handle < 0)
132 throw_line("unable to open drive ({}, SYSTEM: {})", drive_path, getLastError()); …

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.