Timeline for OllyDBG's disassembled syntax and c-equivalent
Current License: CC BY-SA 3.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 10, 2013 at 13:04 | history | tweeted | twitter.com/#!/StackReverseEng/status/354949220081475586 | ||
| Jul 9, 2013 at 11:33 | history | edited | perror | CC BY-SA 3.0 |
Simplification of the question
|
| Jul 9, 2013 at 11:22 | answer | added | Runium | timeline score: 9 | |
| Jul 9, 2013 at 11:06 | history | edited | lfxgroove | CC BY-SA 3.0 |
edited body
|
| Jul 9, 2013 at 11:03 | vote | accept | lfxgroove | ||
| Jul 9, 2013 at 10:21 | comment | added | Avery3R | In your question, eax = &(esi + 0x14); should be eax = *(esi + 0x14);. It's dereferencing it, not referencing it. | |
| Jul 8, 2013 at 19:54 | answer | added | DCoder | timeline score: 5 | |
| Jul 8, 2013 at 17:38 | comment | added | lfxgroove | Ah, thanks! But this later on could be used as a pointer if that's what you'd like? Would you mind turning this into an answer so i have something to accept? :) | |
| Jul 8, 2013 at 17:32 | comment | added | DCoder |
Yes, and DWORD PTR means it will take four bytes starting with that address.
|
|
| Jul 8, 2013 at 17:30 | comment | added | lfxgroove |
So eax will contain the value of what is pointed to by esi + 0x14?
|
|
| Jul 8, 2013 at 16:24 | history | edited | lfxgroove | CC BY-SA 3.0 |
added 2 characters in body
|
| Jul 8, 2013 at 16:22 | comment | added | DCoder |
You're probably looking for DWORD eax = *(DWORD *)((char *)esi + 0x14). (I am not sure, but Olly probably shows offsets in hex, not decimal, by default.)
|
|
| Jul 8, 2013 at 16:15 | history | asked | lfxgroove | CC BY-SA 3.0 |