Skip to main content
Reverse Engineering

Return to Question

Making code appear as code
Source Link
perror
perror
  • 19.2k
  • 29
  • 87
  • 150

i have a question which is the following:

When iI see the assembly line:

 MOV ESI, DWORD PTR DS:[EBP+0x8]

andAnd, when ollydbgOllydbg shows me that [EBP+0x8] = 00000000[EBP+0x8] = 00000000, then can iI write it in C like this:

 int *esi = NULL;

OROr, should iI use the stackaddress EBP+0x8stack address EBP + 0x8 which is 0012FF430x0012FF43 and write something like:

 int *esi = &0012FF43

I would say that the first is the right answer. But i, but I am very confused about that.

i have a question which is the following:

When i see the assembly line:

 MOV ESI, DWORD PTR DS:[EBP+0x8]

and when ollydbg shows me that [EBP+0x8] = 00000000, then can i write it in C like this:

 int *esi = NULL;

OR should i use the stackaddress EBP+0x8 which is 0012FF43 and write something like:

 int *esi = &0012FF43

I would say that the first is the right answer. But i am very confused about that.

When I see the assembly line:

 MOV ESI, DWORD PTR DS:[EBP+0x8]

And, when Ollydbg shows me that [EBP+0x8] = 00000000, then can I write it in C like this:

 int *esi = NULL;

Or, should I use the stack address EBP + 0x8 which is 0x0012FF43 and write something like:

 int *esi = &0012FF43

I would say that the first is the right answer, but I am very confused about that.

Tweeted twitter.com/#!/StackReverseEng/status/470467650024271873
Source Link
user3097712
user3097712
  • 1.5k
  • 1
  • 25
  • 44

Transforming an assembly line into C

i have a question which is the following:

When i see the assembly line:

 MOV ESI, DWORD PTR DS:[EBP+0x8]

and when ollydbg shows me that [EBP+0x8] = 00000000, then can i write it in C like this:

 int *esi = NULL;

OR should i use the stackaddress EBP+0x8 which is 0012FF43 and write something like:

 int *esi = &0012FF43

I would say that the first is the right answer. But i am very confused about that.