Page 1 of 1

can some one help me understand this assembly

Posted: Sun Apr 01, 2018 4:00 pm
by pharaon
hope some one can help me understand this code

Code: Select all

RAX=E336871304
RBX=00000004
RCX=00000339
RDX=00000001
RSI=E336876F40
RDI=231B2642910
RBP=E33686DBF0
RSP=E33686DAF0
RIP=7FF6D68AF130

Probable base pointer =E336871304

7FF6D68AF124 - mov [rax-0C],r13
7FF6D68AF128 - mov [rax-04],r13
7FF6D68AF12C - mov [rax+04],r13d
7FF6D68AF130 - lea rax,[rax+1C]
7FF6D68AF134 - sub rcx,01

Re: can some one help me understand this assembly

Posted: Sun Apr 01, 2018 5:29 pm
by TimFun13
  1. set the address at the value of RAX-0xC to the value of R13 (as quad word)
  2. set the address at the value of RAX-0x4 to the value of R13 (as quad word)
  3. set the address at the value of RAX+0x4 to the value of R13 (as double word)
  4. set the value of RAX to the value of RAX+0x1C (as quad word)
  5. subtract the value of RCX by the immediate value of 0x1 (as quad word)
[Link]
[Link]
[Link]

Re: can some one help me understand this assembly

Posted: Mon Apr 02, 2018 6:27 am
by SunBeam
That doesn't look like a base pointer with that value. And if it is, I'm looking at code from an emulator. PS emulator? You won't be able to find a proper base pointer..