blabberer
September 14th, 2014, 13:41
you entered JNE didnt you ? do you mean why the entered JNE changes to JNZ when Displayed ?
thats because both are same JNE or opcode 75 XX checks the zf and acts according to the status of flag
jnz also checks the same Zf (Zero Flag in EFLAGS Register) and behaves exactly in the same way as JNE and has the same opcode 75 XX
here is a quote from ollydbg.hlp
Quote:
Assembler also understands simplified and alternate mnemonics, like MOVSB (Disassembler decodes it as MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]) or JNE (decoded as JNZ).
|
or straight from the intel opcode manual
Quote:
Because a particular state of the status flags can sometimes be interpreted in two
ways, two mnemonics are defined for some opcodes. For example, the JA (jump if
above) instruction and the JNBE (jump if not below or equal) instruction are alternate
mnemonics for the opcode 77H.
|
