Home | History | Annotate | Download | only in BootSector

Lines Matching full:ebp

111 ;    mov     ebp, 055555555h

122 mov ebp,[esi+03ch] ; ebp = [22000 + [22014] + 3c] = NT Image Header for EFILDR.C
123 add ebp,esi
124 mov edi,[ebp+030h] ; edi = [[22000 + [22014] + 3c] + 2c] = ImageBase (63..32 is zero, ignore)
125 mov eax,[ebp+028h] ; eax = [[22000 + [22014] + 3c] + 24] = EntryPoint
130 mov bx,word ptr[ebp+6] ; bx = Number of sections
132 mov ax,word ptr[ebp+014h] ; ax = Optional Header Size
133 add ebp,eax
134 add ebp,018h ; ebp = Start of 1st Section
139 add esi,[ebp+014h] ; esi = Base of EFILDR.C + PointerToRawData
140 add edi,[ebp+00ch] ; edi = ImageBase + VirtualAddress
141 mov ecx,[ebp+010h] ; ecs = SizeOfRawData
150 add bp,028h ; ebp = ebp + 028h = Pointer to next section record
313 push ebp
341 mov ebp, esp
376 mov eax, [ebp + 16*8] ;; move Int number into RAX
400 mov eax, [ebp+19*8] ; CS
406 mov eax, [ebp+18*8] ; RIP
416 mov eax, [ebp+15*8]
422 mov eax, [ebp+14*8]
428 mov eax, [ebp+13*8]
436 mov eax, [ebp+12*8]
442 mov eax, [ebp+21*8]
448 mov eax, [ebp+10*8]
456 mov eax, [ebp+9*8]
462 mov eax, [ebp+8*8]
468 mov eax, [ebp+17*8]
476 mov eax, [ebp+7*8]
482 mov eax, [ebp+6*8]
488 mov eax, [ebp+5*8]
496 mov eax, [ebp+4*8]
502 mov eax, [ebp+3*8]
508 mov eax, [ebp+2*8]
516 mov eax, [ebp+1*8]
522 mov eax, [ebp+0*8]
528 mov eax, [ebp+22*8]
536 mov eax, [ebp+20*8]
541 mov esi, ebp
571 mov eax, [ebp+18*8] ; RIP
607 mov esp, ebp
635 pop ebp