Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-10-2004, 20:44
Nilrem
 
Posts: n/a
MOV BYTE PTR DS:[463315],EB not working?

N/t.
As far as I know that is the correct ASM syntax, so when in Olly, I right click and choose Assemble and type in that (unticking NOP) and click ok but it comes up as unknown identifier? I'm probably making a silly mistake, but as far as I know that is how you write ASM in Olly.
Reply With Quote
  #2  
Old 01-10-2004, 21:21
asterix asterix is offline
Friend
 
Join Date: Feb 2003
Posts: 98
Rept. Given: 1
Rept. Rcvd 4 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
asterix Reputation: 4
May be
MOV BYTE PTR DS:[00463315],0EB
Reply With Quote
  #3  
Old 01-10-2004, 23:04
Nilrem
 
Posts: n/a
That's worked but why the 0 infront of EB? I mean I can do 74 and 75 no problem so why do you put a 0 infront of EB, and will it still result in a straight jump been put into the address, or does the 0 infront of EB do something totally different.

I tried (with the same method) doing
JMP exenamehere.addresshere
but all it said was "Label expected", now I've had no problems doing this in Softice in the past, so what's happening?

Last edited by Nilrem; 01-10-2004 at 23:21.
Reply With Quote
  #4  
Old 01-11-2004, 04:56
amigo amigo is offline
Friend
 
Join Date: Dec 2002
Posts: 30
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
amigo Reputation: 0
I didn't assemble in OllyDbg, but in most known assemblers (MASM, A86, IDA) when hex number starts with a letter you always must put '0' before the letter to mark that the number follows, not the mnemonix
Reply With Quote
  #5  
Old 01-11-2004, 20:14
Nilrem
 
Posts: n/a
Any ideas on my other problem?
Reply With Quote
  #6  
Old 01-11-2004, 21:06
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
you use JMP exenamehere.addresshere

but you only have to use JMP addresshere

olly translates it with <exename> in front of address

(if your address is for example BB8877 and olly says "no memory at the specified address you have to insert 00BB8877 (8 Bit))
Reply With Quote
  #7  
Old 01-11-2004, 22:13
Nilrem
 
Posts: n/a
Ahh I see cool, thanks, haven't done inline patching in a while you see.
Reply With Quote
  #8  
Old 01-13-2004, 06:14
Nilrem
 
Posts: n/a
Ops no wonder I haven't had a reply in a while I forgot to post the following:

I just get a "Label expected" message now.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Inline Empty Byte Finder chessgod101 Community Tools 9 07-16-2018 00:15
Tool to scan files for common byte sequences dila General Discussion 15 02-18-2018 19:11
pic 16f84 and skip security byte? hrco General Discussion 11 05-25-2004 15:40


All times are GMT +8. The time now is 22:37.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )