#1
|
||||
|
||||
Frame troubles
I'm having trouble understanding what is happening in this code snippet. Quite a few of the Delphi procs start in a similar way with same two FS: statements
Code:
CODE:004BDE62 33 C0 xor eax, eax CODE:004BDE64 55 push ebp CODE:004BDE65 68 FF DE 4B 00 push offset @@4 CODE:004BDE6A 64 FF 30 push dword ptr fs:[eax] CODE:004BDE6D 64 89 20 mov fs:[eax], esp ... CODE:004BDEFF E9 00 64 F4 FF @4: jmp @HandleFinally ... v8 = &v15; v7 = v4BDEFF; v6 = __readfsdword(0); __writefsdword(0, (unsigned int)&v6); In particular, what are the two statements involving FS doing and is there a way to make hexrays do a proper job of handling them?. Sorry for the dumb question, but this is the first time that I've had to look at FS. Git |
#2
|
|||
|
|||
isn't this just setting a seh handler ??
|
#3
|
||||
|
||||
yes., because you zeroed eax with the xor.
olly would let you know via a comment... |
#4
|
||||
|
||||
Yes, I suspect it is some kind of exception handler. Is there any way to get hexrays to handle it more elegantly?
Git |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Flexlm troubles | Zigmund | General Discussion | 0 | 04-29-2003 14:51 |
Binding Troubles | SLIM SLIM | General Discussion | 0 | 02-26-2003 05:05 |