Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

compare with unknown value malware disassembly ?

Featured Replies

Posted

1)

cmp dword_4298B8, eax
jnz short loc_xxxx

dword_4298B8 is initialized as "dd ? "

then how to compare with eax?
dword_4298B8 --->  dd ?

 

2)
Can you give me an example of array and accessing it and allocating it in ASM when i do reverse egnineering! 
Thanks
 

3) 

mov WORD PTR [ebx], 2

WHAT IS THIS ABOVE "WORD PTR"  ? 

dword is initialized as dd ? which means its uninitialised memory, filled at runtime by something

cmp dword ptr [0x12345678], eax would be such a comparison

DWORD ptr points to a dword, so the comparison is dword

WORD ptr points to a word, so the comparison is word

BYTE ptr points to a byte, so the comparison is a byte

theres others like qword ptr, tbyte ptr and so on... this is pretty much asm 101 though, so i'd suggest you go read some asm books

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.