Assembly Language for Beginners

(Jeff_L) #1

1.15. SWITCH()/CASE/DEFAULT


MOVwrites the pointer to the string at address0x001EF850(see the stack window). Then, jump happens.
This is the first instruction of theprintf()function in MSVCR100.DLL (This example was compiled with
/MD switch):


Figure 1.47:OllyDbg: first instruction ofprintf()in MSVCR100.DLL

Nowprintf()treats the string at0x00FF3010as its only argument and prints the string.

Free download pdf