OLD | NEW |
---|---|
1 # Test all rel32 jump instructions. | 1 # Test all rel32 jump instructions. |
2 | 2 |
3 # .text start RVA and end RVA | 3 # .text start RVA and end RVA |
4 1000 | 4 1000 |
5 3000 | 5 3000 |
6 # .reloc start RVA and end RVA | 6 # .reloc start RVA and end RVA |
7 3800 | 7 3800 |
8 4000 | 8 4000 |
9 # End RVA | 9 # End RVA |
10 5000 | 10 5000 |
11 | 11 |
12 # Assume ImageBase = 00400000. This does not affect the test. | 12 # Assume ImageBase = 00400000. This does not affect the test. |
13 Program: | 13 Program: |
huangs
2016/05/30 05:48:35
Doh! I forgot that I wrote a poor-man's disassemb
etiennep
2016/05/30 17:07:30
Acknowledged.
| |
14 00401000: 55 push ebp | 14 00401000: 55 push ebp |
15 00401001: 8B EC mov ebp,esp | 15 00401001: 8B EC mov ebp,esp |
16 00401003: E8 00 00 00 00 call 00401008 | 16 00401003: E8 00 00 00 00 call 00401008 |
17 00401008: E9 00 00 00 00 jmp 0040100D | 17 00401008: E9 00 00 00 00 jmp 0040100D |
18 0040100D: 0F 80 00 00 00 00 jo 00401013 | 18 0040100D: 0F 80 00 00 00 00 jo 00401013 |
19 00401013: 0F 81 00 00 00 00 jno 00401019 | 19 00401013: 0F 81 00 00 00 00 jno 00401019 |
20 00401019: 0F 82 00 00 00 00 jb 0040101F | 20 00401019: 0F 82 00 00 00 00 jb 0040101F |
21 0040101F: 0F 83 00 00 00 00 jae 00401025 | 21 0040101F: 0F 83 00 00 00 00 jae 00401025 |
22 00401025: 0F 84 00 00 00 00 je 0040102B | 22 00401025: 0F 84 00 00 00 00 je 0040102B |
23 0040102B: 0F 85 00 00 00 00 jne 00401031 | 23 0040102B: 0F 85 00 00 00 00 jne 00401031 |
24 00401031: 0F 86 00 00 00 00 jbe 00401037 | 24 00401031: 0F 86 00 00 00 00 jbe 00401037 |
25 00401037: 0F 87 00 00 00 00 ja 0040103D | 25 00401037: 0F 87 00 00 00 00 ja 0040103D |
26 0040103D: 0F 88 00 00 00 00 js 00401043 | 26 0040103D: 0F 88 00 00 00 00 js 00401043 |
27 00401043: 0F 89 00 00 00 00 jns 00401049 | 27 00401043: 0F 89 00 00 00 00 jns 00401049 |
28 00401049: 0F 8A 00 00 00 00 jp 0040104F # Ignored! | 28 00401049: 0F 8A 00 00 00 00 jp 0040104F # Ignored! |
29 0040104F: 0F 8B 00 00 00 00 jnp 00401055 # Ignored! | 29 0040104F: 0F 8B 00 00 00 00 jnp 00401055 # Ignored! |
30 00401055: 0F 8C 00 00 00 00 jl 0040105B | 30 00401055: 0F 8C 00 00 00 00 jl 0040105B |
31 0040105B: 0F 8D 00 00 00 00 jge 00401061 | 31 0040105B: 0F 8D 00 00 00 00 jge 00401061 |
32 00401061: 0F 8E 00 00 00 00 jle 00401067 | 32 00401061: 0F 8E 00 00 00 00 jle 00401067 |
33 00401067: 0F 8F 00 00 00 00 jg 0040106D | 33 00401067: 0F 8F 00 00 00 00 jg 0040106D |
34 0040106D: 5D pop ebp | 34 0040106D: FF 15 00 00 00 00 call 00401073 |
35 0040106E: C3 ret | 35 00401073: FF 25 00 00 00 00 jmp 00401079 |
36 00401079: 8B 05 00 00 00 00 mov eax, 00401079 | |
huangs
2016/05/30 05:48:35
This should be
mov eax, [rip+00000000]
please c
etiennep
2016/05/30 17:07:30
Done.
| |
37 0040107F: 8B 3D 00 00 00 00 mov edi, 00401085 | |
38 00401085: 8D 05 00 00 00 00 lea eax, 00401079 | |
39 0040108B: 8D 3D 00 00 00 00 lea edi, 00401079 | |
40 00401091: 48 8B 05 00 00 00 mov rax, 00401098 | |
41 00 | |
42 00401098: 48 8B 3D 00 00 00 mov rdi, 0040109F | |
43 00 | |
44 0040109F: 48 8D 05 00 00 00 lea rax, 004010A6 | |
45 00 | |
46 004010A6: 48 8D 3D 00 00 00 lea rdi, 004010AD | |
47 00 | |
48 004010AD: 4C 8B 05 00 00 00 mov r8, 004010B4 | |
49 00 | |
50 004010B4: 4C 8B 3D 00 00 00 mov r15, 004010BB | |
51 00 | |
52 004010BB: 4C 8D 05 00 00 00 lea r8, 004010C2 | |
53 00 | |
54 004010C2: 4C 8D 3D 00 00 00 lea r15, 004010C9 | |
55 00 | |
56 004010C9: 5D pop ebp | |
57 004010CA: C3 ret | |
36 | 58 |
37 Abs32: | 59 Abs32: |
38 | 60 |
39 Expected: | 61 Expected: |
40 1004 | 62 1004 |
41 1009 | 63 1009 |
42 100F | 64 100F |
43 1015 | 65 1015 |
44 101B | 66 101B |
45 1021 | 67 1021 |
46 1027 | 68 1027 |
47 102D | 69 102D |
48 1033 | 70 1033 |
49 1039 | 71 1039 |
50 103F | 72 103F |
51 1045 | 73 1045 |
52 1057 | 74 1057 |
53 105D | 75 105D |
54 1063 | 76 1063 |
55 1069 | 77 1069 |
78 106F | |
79 1075 | |
80 # 107B Not yet detected. | |
81 # 1081 Not yet detected. | |
82 # 1087 Not yet detected. | |
83 # 108D Not yet detected. | |
84 1094 | |
85 109B | |
86 10A2 | |
87 10A9 | |
88 10B0 | |
89 10B7 | |
90 10BE | |
91 10C5 | |
OLD | NEW |