![]() |
|
#1
|
|||
|
|||
|
All
Using OllyDbg, I see this line 00456F05 . F687 70940000 04 TEST BYTE PTR DS[EDI+9470],4 how do I get to the location in memory that the TEST is refering to? I am very new to this....
|
|
#2
|
|||
|
|||
|
Look at the value of EDI register, add 9470 (hex!) to it and you are at the byte that is refered; what is tested is 3rd bit (test x,4).
Then just click to data window, select go to - expresion, you can even type in there EDI+9470 and enter thats it.
|
|
#3
|
|||
|
|||
|
Least
Thanks for that! |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Newbie needs help again | MrCracking | General Discussion | 6 | 03-22-2004 19:51 |
| Newbie needs help :) Please. | knight | General Discussion | 1 | 02-25-2004 15:42 |