Scribd
Upload
44 views1 page

Kuser Peb and Other

This document contains assembly code instructions and hexadecimal addresses. It begins with hexadecimal values and labels for thread start and get file size. It then shows assembly code instructions that manipulate registers and memory addresses, subtracting, adding, xor, and subtracting values from registers. It ends with a return instruction.

Uploaded by

Fabricio Sousa
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
44 views1 page

Kuser Peb and Other

This document contains assembly code instructions and hexadecimal addresses. It begins with hexadecimal values and labels for thread start and get file size. It then shows assembly code instructions that manipulate registers and memory addresses, subtracting, adding, xor, and subtracting values from registers. It ends with a return instruction.

Uploaded by

Fabricio Sousa
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 1

000000014D26D440 - 00 00 00 00

00000001568479E0 - 00 00 00 00

thread start - 00000001493E6ED0


getfilesize - 0000000000001422

kuser:

49 C7 C7 78 02 FE 7F 45 8B 37 66 41 83 EF 90 45 03 37 66 41 83 EF 7C 45 03 37 66 41
83 EF E8 45 03 37 66 41 83 C7 FC 45 33 37 66 41 83 C7 F0 45 33 37 66 41 83 C7 0C 45
2B 37 41 81 EE 6A 82 10 55 C3

0000000156B85E90 | 49:C7C7 7802FE7F | mov r15,7FFE0278


|
0000000156B85E97 | 45:8B37 | mov r14d,dword ptr ds:[r15]
|
0000000156B85E9A | 6641:83EF 90 | sub r15w,FF90
|
0000000156B85E9F | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EA2 | 6641:83EF 7C | sub r15w,7C
|
0000000156B85EA7 | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EAA | 6641:83EF E8 | sub r15w,FFE8
|
0000000156B85EAF | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EB2 | 6641:83C7 FC | add r15w,FFFC
|
0000000156B85EB7 | 45:3337 | xor r14d,dword ptr ds:[r15]
|
0000000156B85EBA | 6641:83C7 F0 | add r15w,FFF0
|
0000000156B85EBF | 45:3337 | xor r14d,dword ptr ds:[r15]
|
0000000156B85EC2 | 6641:83C7 0C | add r15w,C
|
0000000156B85EC7 | 45:2B37 | sub r14d,dword ptr ds:[r15]
|
0000000156B85ECA | 41:81EE 6A821055 | sub r14d,5510826A
|
0000000156B85ED1 | C3 | ret
|

23 53 DC 40
01 00 10 01

You might also like