Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-09-2004, 05:31
MrCracking
 
Posts: n/a
Unhappy Newbie need help

All

Using OllyDbg, I see this line

00456F05 . F687 70940000 04 TEST BYTE PTR DS[EDI+9470],4

how do I get to the location in memory that the TEST is refering to?

I am very new to this....

Reply With Quote
  #2  
Old 03-09-2004, 15:10
least
 
Posts: n/a
Look at the value of EDI register, add 9470 (hex!) to it and you are at the byte that is refered; what is tested is 3rd bit (test x,4).
Then just click to data window, select go to - expresion, you can even type in there EDI+9470 and enter thats it.
Reply With Quote
  #3  
Old 03-10-2004, 05:38
MrCracking
 
Posts: n/a
Least

Thanks for that!
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Newbie needs help again MrCracking General Discussion 6 03-22-2004 19:51
Newbie needs help :) Please. knight General Discussion 1 02-25-2004 15:42


All times are GMT +8. The time now is 23:45.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )