Reverse Engineering for Beginners

CHAPTER 13. SWITCH()/CASE/DEFAULT CHAPTER 13. SWITCH()/CASE/DEFAULT

MOVwrites the pointer to the string at address0x001EF850(see the stack window). Then, jump happens. This is the first
instruction of theprintf()function in MSVCR100.DLL (This example was compiled with /MD switch):

Figure 13.6:OllyDbg: first instruction ofprintf()in MSVCR100.DLL

Nowprintf()treats the string at0x00FF3010as its only argument and prints the string.