can some one help me understand this assembly

Memory scanning, code injection, debugger internals and other gamemodding related discussion
Post Reply
pharaon
Expert Cheater
Expert Cheater
Posts: 93
Joined: Sat Aug 05, 2017 1:42 pm
Reputation: 0

can some one help me understand this assembly

Post by pharaon »

hope some one can help me understand this code

Code: Select all

RAX=E336871304
RBX=00000004
RCX=00000339
RDX=00000001
RSI=E336876F40
RDI=231B2642910
RBP=E33686DBF0
RSP=E33686DAF0
RIP=7FF6D68AF130

Probable base pointer =E336871304

7FF6D68AF124 - mov [rax-0C],r13
7FF6D68AF128 - mov [rax-04],r13
7FF6D68AF12C - mov [rax+04],r13d
7FF6D68AF130 - lea rax,[rax+1C]
7FF6D68AF134 - sub rcx,01

TimFun13
Expert Cheater
Expert Cheater
Posts: 1354
Joined: Fri Mar 03, 2017 12:31 am
Reputation: 6

Re: can some one help me understand this assembly

Post by TimFun13 »

  1. set the address at the value of RAX-0xC to the value of R13 (as quad word)
  2. set the address at the value of RAX-0x4 to the value of R13 (as quad word)
  3. set the address at the value of RAX+0x4 to the value of R13 (as double word)
  4. set the value of RAX to the value of RAX+0x1C (as quad word)
  5. subtract the value of RCX by the immediate value of 0x1 (as quad word)
[Link]
[Link]
[Link]

User avatar
SunBeam
Administration
Administration
Posts: 4765
Joined: Sun Feb 04, 2018 7:16 pm
Reputation: 4403

Re: can some one help me understand this assembly

Post by SunBeam »

That doesn't look like a base pointer with that value. And if it is, I'm looking at code from an emulator. PS emulator? You won't be able to find a proper base pointer..

Post Reply

Who is online

Users browsing this forum: No registered users