all InfoSec news
Igor’s Tio of the Week #134: ARM BL jumps
Malware Analysis, News and Indicators - Latest topics malware.news
If you ever looked at IDA ARM module’s processor-specific settings, you may have been puzzled by the option “Disable BL jumps detection”.
What is it and when to use it?
Background
The ARM instruction set initially used fixed-width 32-bit instructions. The relative branch instruction, B, allocated 24 bits for the offset, giving it a range of ±32MB.
Some time later, ARM introduced a a compact 16-bit encoding for a subset of instructions, called Thumb. Because most relative branches …
16-bit arm bits called detection encoding function ida malware analysis may processor relative settings what is