Jump to content
Tuts 4 You

Edit History

Please note that revisions older than -1 days are pruned and will no longer show here
James Taylor

James Taylor

30 minutes ago, LCF-AT said:

Hi,

I see you 2 will be best friends forever. :hug:

Hint: Check out IA-32 Opcode Map 1.5 by Yury Lukach so there you have many infos about opcodes at once...

2018-08-01_213651.png.085a9e41c23dd2eff7d0f12923c58b72.png

...about the LEA command.Yes,the memory address is the result of [X] like the others said already eax+esi-6 = address.Its diffrent to mov command what moves the source and lea not also if both using brackets.Just keep the brackets away in your head for this example...

2018-08-01_214613.png.4fd0d62cc1ba85ee56bbade76bae1e5c.png

...in OllyDBG you can see the result address on fly in pane window.Just play a little around.

greetz

Thanks a lot i really appreciate it. You guy make this forum great.

one more question what will be the c pseudo code for this?  

Thanks 

James Taylor

James Taylor

26 minutes ago, LCF-AT said:

Hi,

I see you 2 will be best friends forever. :hug:

Hint: Check out IA-32 Opcode Map 1.5 by Yury Lukach so there you have many infos about opcodes at once...

2018-08-01_213651.png.085a9e41c23dd2eff7d0f12923c58b72.png

...about the LEA command.Yes,the memory address is the result of [X] like the others said already eax+esi-6 = address.Its diffrent to mov command what moves the source and lea not also if both using brackets.Just keep the brackets away in your head for this example...

2018-08-01_214613.png.4fd0d62cc1ba85ee56bbade76bae1e5c.png

...in OllyDBG you can see the result address on fly in pane window.Just play a little around.

greetz

Thanks a lot i really appreciate it. You guy make this forum great. 

Thanks 

×
×
  • Create New...