Log in

View Full Version : Missing address


catalis
October 11th, 2001, 03:52
Hi, there
This is my first tread here. I just want to know why is it that
some address in Soft-Ice doesn't exists in the dissambled file.
I mean how am I suppose to patch the file if I can't find the
offset.

nobody
October 11th, 2001, 09:21
The address you read in softIce does not correspond to the address you find in the hex editor or dissassembled list. The address you see in Sice is the sum of a base image (typically hex 04000000 or hex 04100000) plus an offset that correspond to the position in the disassembled or hexedited file. The base image in which the program is loaded may change from program to program. The simplest solution is NOT to use the address of the relevant code as a tool to locate the instruction in your hex editor or dissasembler. Instead, write down some 16 to 20 bytes of code close by the instruction you plan to locate and use it in a search with your hex editor or dissasembler. in one or two tries, you will get to the code area you want to find.