Skip to main content
added 31 characters in body
Source Link
PaulD
  • 453
  • 1
  • 4
  • 10

When execution enters a new function by performing call I do often see this code template (generatingasm list generated by Gnu Debugger when in debugging mode):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

When execution enters a new function by performing call I do often see this code template (generating by Gnu Debugger):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

When execution enters a new function by performing call I do often see this code template (asm list generated by Gnu Debugger when in debugging mode):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

Tweeted twitter.com/#!/StackReverseEng/status/337463417231249408
added 1 characters in body
Source Link
PaulD
  • 453
  • 1
  • 4
  • 10

When eecutionexecution enters a new function by performing call I do often see this code template (generating by Gnu Debugger):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

When eecution enters a new function by performing call I do often see this code template (generating by Gnu Debugger):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

When execution enters a new function by performing call I do often see this code template (generating by Gnu Debugger):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?

Source Link
PaulD
  • 453
  • 1
  • 4
  • 10

What purpose of mov %esp,%ebp?

When eecution enters a new function by performing call I do often see this code template (generating by Gnu Debugger):

0x00401170 push %ebp 0x00401171 mov %esp,%ebp 0x00401173 pop %ebp 

So what's the purpose of moving esp to ebp?