Log in

View Full Version : softice bug?, durin a jmp


ON'error
December 20th, 2001, 14:06
from uncracked ida:

.text:0040289F jmp short loc_4028A2
...

.text:004028A2 xor dh, dl
.text:004028A4 shl edx, 1
.text:004028A6 inc edx
.text:004028A7 inc ebx
.text:004028A8 or eax, eax
.text:004028AA jnz short loc_40289B
.text:004028AC jmp short loc_4028AF

hi,
when softice reached 40289F and i press f10(p) softice jumps but i dont see where it jumps to.
when i tried to find 4028A2(in SI) i only find 4028A1 with a stange adress(like 3245:35765554).
After typin f10 few times i finaly see the highlighted line again, but i dont know what is exclusiveOred[] and i really tried to find it. Is it a softice error?

Fake51
December 20th, 2001, 19:37
It's not an error on Si's part, it's a protection approach: You jump to the middle of an opcode. Softice will disasm the code opcode by opcode, instead of looking at the code flow. If, in si, you press . and then return, si will jump to the current eip. Thus, it's just a trick, to make you debug some code, that you would rather jump over, or run it before you get a chance to see it.

Fake