assembly - ASM to C - Can someone explain me what structure this is? -
i having following asm code (ollydbg) should contain structure developed in c. can tell me how structure looks in c programming language? maybe little explanation how figured out stored in structure , on...
thank much!
cpu disasm address hex dump command comments 6a27f058 /$ 68 e9a6286a push 6a28a6e9 ; entry point 6a27f05d |. 64:ff35 00000 push dword ptr fs:[0] 6a27f064 |. 8b4424 10 mov eax,dword ptr ss:[esp+10] 6a27f068 |. 896c24 10 mov dword ptr ss:[esp+10],ebp 6a27f06c |. 8d6c24 10 lea ebp,[esp+10] 6a27f070 |. 2be0 sub esp,eax 6a27f072 |. 53 push ebx 6a27f073 |. 56 push esi 6a27f074 |. 57 push edi 6a27f075 |. a1 e067336a mov eax,dword ptr ds:[6a3367e0] 6a27f07a |. 3145 fc xor dword ptr ss:[ebp-4],eax 6a27f07d |. 33c5 xor eax,ebp 6a27f07f |. 50 push eax 6a27f080 |. 8965 e8 mov dword ptr ss:[ebp-18],esp 6a27f083 |. ff75 f8 push dword ptr ss:[ebp-8] 6a27f086 |. 8b45 fc mov eax,dword ptr ss:[ebp-4] 6a27f089 |. c745 fc fefff mov dword ptr ss:[ebp-4],-2 6a27f090 |. 8945 f8 mov dword ptr ss:[ebp-8],eax 6a27f093 |. 8d45 f0 lea eax,[ebp-10] 6a27f096 |. 64:a3 0000000 mov dword ptr fs:[0],eax 6a27f09c \. c3 retn
if code, can make ollydbg display corresponding c code rightclicking cpu window, entering comments submenu , selecting show source. make work you'll need pdb file belonging executable.
i'm unsure if olly1.x support that, 2.x versions able so.
Comments
Post a Comment