Question: Complete the stack frame given the following assembly code when eip starts at 0x401A45 and ends at 0x4019B4. Make sure to fill in the stack

 Complete the stack frame given the following assembly code when eip

Complete the stack frame given the following assembly code when eip starts at 0x401A45 and ends at 0x4019B4. Make sure to fill in the stack addresses that are not already complete and any other blank space. Given: esp = 0x12F00, ebp = 0x12F04 when eip = 0x401A45 Func0 00401A45 8B 55 0C mov edx, [ebp+0Ch] 00401A48 52 push edx,00401A49 8B 49 8B 45 08 mov eax, [ebp + B] 00401A4C 50 push eax 00401A4D E8 4E FF FF FF call Funcl 00401A52 83 C4 10 add esp, 8 Fuc1: 004019A0 55 push ebp 004019A1 8B EC mov ebp, esp 004019A3 83 EC 08 sub esp, 8 09 004019A6 C7 45 F8 00 00 00 00 mov [ebp - 8], 0 004019AD C7 45 FC 00 00 00 00 nov [ebp - 4], 123Fh 004019B4 What is the address of Func1? _______ Show how the assembler calculated the offset for the call to Func1. You do not have to do the math Why do we add 8 to esp at address 0x401A52? _________ Why do we subtract 8 at address 0x4019A3? _______ What is the value of ebp when eip =0x401 9B4? _______

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!