assembly - ASM to C - Can someone explain me what structure this is? -


i having following asm code (ollydbg) should contain structure developed in c. can tell me how structure looks in c programming language? maybe little explanation how figured out stored in structure , on...

thank much!

cpu disasm address   hex dump          command                           comments 6a27f058  /$  68 e9a6286a   push 6a28a6e9                     ; entry point 6a27f05d  |.  64:ff35 00000 push dword ptr fs:[0] 6a27f064  |.  8b4424 10     mov eax,dword ptr ss:[esp+10] 6a27f068  |.  896c24 10     mov dword ptr ss:[esp+10],ebp 6a27f06c  |.  8d6c24 10     lea ebp,[esp+10] 6a27f070  |.  2be0          sub esp,eax 6a27f072  |.  53            push ebx 6a27f073  |.  56            push esi 6a27f074  |.  57            push edi 6a27f075  |.  a1 e067336a   mov eax,dword ptr ds:[6a3367e0] 6a27f07a  |.  3145 fc       xor dword ptr ss:[ebp-4],eax 6a27f07d  |.  33c5          xor eax,ebp 6a27f07f  |.  50            push eax 6a27f080  |.  8965 e8       mov dword ptr ss:[ebp-18],esp 6a27f083  |.  ff75 f8       push dword ptr ss:[ebp-8] 6a27f086  |.  8b45 fc       mov eax,dword ptr ss:[ebp-4] 6a27f089  |.  c745 fc fefff mov dword ptr ss:[ebp-4],-2 6a27f090  |.  8945 f8       mov dword ptr ss:[ebp-8],eax 6a27f093  |.  8d45 f0       lea eax,[ebp-10] 6a27f096  |.  64:a3 0000000 mov dword ptr fs:[0],eax 6a27f09c  \.  c3            retn 

if code, can make ollydbg display corresponding c code rightclicking cpu window, entering comments submenu , selecting show source. make work you'll need pdb file belonging executable.

i'm unsure if olly1.x support that, 2.x versions able so.


Comments

Popular posts from this blog

java - Play! framework 2.0: How to display multiple image? -

gmail - Is there any documentation for read-only access to the Google Contacts API? -

php - Controller/JToolBar not working in Joomla 2.5 -