Forum Discussion

Fastlime's avatar
Fastlime
Icon for Bronze I rankBronze I
10 months ago
Solved

Foundational Static Analysis: Analyzing Structures

The question is asking me "In the disassembly at address 00401567, what is the structure EDX is pointing to? Look at Microsoft Docs for help!" At the very end of the briefing they go over the explan...
application security
cyber team simulations
defensive cyber
help & support
  • ChrisKershaw's avatar
    ChrisKershaw
    9 months ago

    Hey tacobacocrunchwrap3

    I spoke with our lab Content Team.

    They have updated the wording in the task, which we hope will make this easier to follow. Can I get you to try the lab again, and confirm if you can progress with your attempt?

ChrisKershaw's avatar
ChrisKershaw
Icon for Community Support rankCommunity Support
9 months ago

Hi tacobacocrunchwrap3 

I have reached out to our lab Content Team to have this examined further for you. I'll be happy to share an update once I've heard back if that will help 😊. 

netcat's avatar
netcat
Icon for Silver III rankSilver III
9 months ago

Hint 1:
Ignore the question from iL, it doesn't help (except for the fact that you shall enter only one word into the answer box, and confusing you with EDX)

Hint 2:
At address 00401567 something is pushed onto the stack. Generally, for which reasons do you push items on the stack? (ChatGPT gives you five answers.)

Hint 3:
At address 00401567 something is pushed onto the stack. Can you figure out the reason in this case, why is it pushed on the stack and what for?