(Resubmitted and revised by @galenbwill for user chris123 on public slack)
Binary Ninja Version
2.4.3044-dev
Describe the bug
The binary contains a defined string:
char encryptedFlag[0x1a] = "\xd0\xc05O\x0c\xd9#*HK\t\x0bT<\xf8\xc0\xe5\xdf\xd7y\x0f=\xdb5\xc4", 0
So a mix of \xXX and normal chars.
In this case selecting the entire string , right click, copy as, raw hex only copies: "d0c0" so it ends once it encounters the not escaped O. the first two bytes of the selection.
The exact same happens when RC4 decrypting, it only decrypts the first two bytes by selecting it all, right click, transformation, RC4.
A workaround is to temporarily undefine the variable, copy/rc4 and redefine it.
Clarification: The behavior is actually to copy the entire selection, except only the first two bytes of the last line of the selection.
Expected behavior
The entire data gets copied and either decrypted or copied as raw data. Basically the output of binascii.hexlify(bv.read(here, 0x1a)) is expected. (which in the above example would be d0c0354f0cd9232a484b090b543cf8c0e5dfd7790f3ddb35c400)
Version and Platform (required):
- Binary Ninja: Dev 2.4.3044
- OS: Windows
- Version 10
(Resubmitted and revised by @galenbwill for user
chris123on public slack)Binary Ninja Version
2.4.3044-dev
Describe the bug
The binary contains a defined string:
So a mix of
\xXXand normal chars.In this case selecting the entire string , right click, copy as, raw hex only copies:
the first two bytes of the selection."d0c0"so it ends once it encounters the not escaped O.The exact same happens when RC4 decrypting, it only decrypts the first two bytes by selecting it all, right click, transformation, RC4.
A workaround is to temporarily undefine the variable, copy/rc4 and redefine it.
Clarification: The behavior is actually to copy the entire selection, except only the first two bytes of the last line of the selection.
Expected behavior
The entire data gets copied and either decrypted or copied as raw data. Basically the output of
binascii.hexlify(bv.read(here, 0x1a))is expected. (which in the above example would bed0c0354f0cd9232a484b090b543cf8c0e5dfd7790f3ddb35c400)Version and Platform (required):