Skip to content

Instantly share code, notes, and snippets.

@evanmcc
Created March 30, 2012 05:30
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save evanmcc/2246826 to your computer and use it in GitHub Desktop.
Save evanmcc/2246826 to your computer and use it in GitHub Desktop.
difference in fn prologue?
This is all right as we're entering the function where the data is seen as corrupted.
stage0:
2b29f5: 41 55 push %r13
2b29f7: 41 54 push %r12
2b29f9: 53 push %rbx
2b29fa: 48 81 ec b8 04 00 00 sub $0x4b8,%rsp
2b2a01: 49 89 d6 mov %rdx,%r14
2b2a04: 4c 89 b5 48 fb ff ff mov %r14,-0x4b8(%rbp)
2b2a0b: 48 89 bd 28 fb ff ff mov %rdi,-0x4d8(%rbp)
stage1:
2b95a5: 41 55 push %r13
2b95a7: 41 54 push %r12
2b95a9: 53 push %rbx
2b95aa: 48 8d a4 24 48 fb ff lea -0x4b8(%rsp),%rsp
2b95b1: ff
2b95b2: 48 8b 01 mov (%rcx),%rax
2b95b5: 49 89 d6 mov %rdx,%r14
2b95b8: 48 89 bd 28 fb ff ff mov %rdi,-0x4d8(%rbp)
2b95bf: 4c 89 b5 48 fb ff ff mov %r14,-0x4b8(%rbp)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment