Prev: Free Disassembler
Next: udp
From: goblin.azrael@yahoo.com on 26 Oct 2006 09:53
Now i was reading a asm code. But it is assembled by fasm.

who can tell me the following code,thx all.

(ps:after these code,what is the registers' value?)

;'strutures':
IMAGE_DOS_HEADER ecx,edx,edi
IMAGE_FILE_HEADER ecx,edx,esi
IMAGE_OPTIONAL_HEADER edx,edi
IMAGE_SECTION_HEADER esi,edi
IMAGE_DATA_DIRECTORY eax,esi
IMAGE_IMPORT_DESCRIPTOR esi
IMAGE_IMPORT_BY_NAME eax
IMAGE_EXPORT_DIRECTORY eax
WIN32_FIND_DATA edi,eax

thx
your goblin

From: Bill Marcum on 27 Oct 2006 00:42
On 26 Oct 2006 06:53:36 -0700, goblin.azrael(a)yahoo.com
<goblin.azrael(a)gmail.com> wrote:
> Now i was reading a asm code. But it is assembled by fasm.
>
> who can tell me the following code,thx all.
>
> (ps:after these code,what is the registers' value?)
>
> ;'strutures':
> IMAGE_DOS_HEADER ecx,edx,edi
> IMAGE_FILE_HEADER ecx,edx,esi
> IMAGE_OPTIONAL_HEADER edx,edi
> IMAGE_SECTION_HEADER esi,edi
> IMAGE_DATA_DIRECTORY eax,esi
> IMAGE_IMPORT_DESCRIPTOR esi
> IMAGE_IMPORT_BY_NAME eax
> IMAGE_EXPORT_DIRECTORY eax
> WIN32_FIND_DATA edi,eax
>
> thx
> your goblin
>
I'm not familiar with FASM, but I don't see any executable code there,
just identifiers and register names.


--
For internal use only.
 | 
Pages: 1
Prev: Free Disassembler
Next: udp