Log in

View Full Version : please Help on the Code


shan75
January 6th, 2010, 11:53
004012F5 MOV DWORD PTR DS:[403C5C],<JMP.&kernel32.lstrca>

DS stands for data segment... but i am unable to find the location to get the data... I am using OllyDbg..

the instruction started at 00401000 and end at 004016E2 I can't find DS:[403050] this location..
how can i find this location???

please help me.....

thanks

dila
January 7th, 2010, 18:24
With OllyDbg you can step up to the instruction, pressing F8 until it is highlighted, then right-click on it and select Follow in Dump -> Memory address. The dump window will show you the data at DS:[403050].