problem with use "assume" macro

assume eax:POINT ; everything ok assume eax:IMAGE_OPTIONAL_HEADER32 ; everything ok assume eax:WIN32_FIND_DATA ; error "illegal instruction" assume eax:IMAGE_NT_HEADERS32 ; error "illegal instruction"

marcinzabrze12 wrote:

Another yet problem. When i try use assume:

Code:

 
assume    eax:POINT                   ; everything ok 
assume    eax:IMAGE_OPTIONAL_HEADER32 ; everything ok

assume    eax:WIN32_FIND_DATA         ; error "illegal instruction"
assume    eax:IMAGE_NT_HEADERS32      ; error "illegal instruction"

The assume macro doesn't like nested structs.
A workaround is to flatten the struct.
Original includes:

Code:

struct FILETIME
  dwLowDateTime  dd ?
  dwHighDateTime dd ?
ends
struct WIN32_FIND_DATA
  dwFileAttributes   dd ?
  ftCreationTime     FILETIME
  ftLastAccessTime   FILETIME
  ftLastWriteTime    FILETIME
  nFileSizeHigh      dd ?
  nFileSizeLow       dd ?
  dwReserved0           dd ?
  dwReserved1           dd ?
  cFileName             TCHAR MAX_PATH dup (?)
  cAlternateFileName TCHAR 14 dup (?)
ends

flattened include:

Code:

struct WIN32_FIND_DATA
  dwFileAttributes dd ?
; FILETIME
    ftCreationTime.dwLowDateTime dd ?
    ftCreationTime.dwHighDateTime dd ?
; FILETIME
    ftLastAccessTime.dwLowDateTime dd ?
    ftLastAccessTime.dwHighDateTime dd ?
; FILETIME
    ftLastWriteTime.dwLowDateTime dd ?
    ftLastWriteTime.dwHighDateTime dd ?
  nFileSizeHigh dd ?
  nFileSizeLow dd ?
  dwReserved0 dd ?
  dwReserved1 dd ?
  cFileName TCHAR MAX_PATH dup (?)
  cAlternateFileName TCHAR 14 dup (?)
ends

Also The assume macro doesn't like comma separated data statements.