Learning Malware Analysis

3.5 Disassembly Challenge

The following is a disassembled output of a simple C code snippet. Can you figure out what this code snippet does, and can you translate it back to a pseudocode (high-level language equivalent)? Use all of the concepts that you have learned so far to solve the challenge. The answer to the challenge will be covered in the next section, and we will also look at the original C code snippet after we solve this challenge:

mov dword ptr [ebp-4],1  ➊mov eax,dword ptr [ebp-4]  ➋mov dword ptr [ebp-8],eax  ➌