1

I'm studying reverse engineering, I wrote the following code to see how it is to pass struct variables in the disassembly.

struct s {
    int a;
    int b;
    int c;
};

struct s get_some_values(int a)
{
    struct s rt;

    rt.a = a + 1;
    rt.b = a + 2;
    rt.c = a + 3;

    return rt;
}

int main()
{
    get_some_values(4);
}

The env is:

Since then, at the left corner of windbg, its "BUSY", and not responding to any commands like 'g'.

Here's the screenshot: windbg stopped

Any idea what I'm facing now? Thanks in advance!

2
  • 1
    Isn't that easier to use "bu YourModuleName!main"?
    – EWD-0-
    Commented Dec 13, 2017 at 9:28
  • 1
    returnvalue!main does not appear to be a correct symbol if you are looking to set a bp on functiion main of the exe it should be yourmodname!main where yourmodname is the actual modulename liike foo blah bar or whatever
    – blabb
    Commented Dec 14, 2017 at 2:53

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.