Quote:
[Originally Posted by naides]Several options:
Find HIEW, which is a hex editor. It has an assemble option, so what you write in assembly, i.e jmp 00456789 gets translated into the proper bytes E9 89 67 45 00
SoftIce also has an assembly option:
A 00456789
then you type the correct mnemonics nop,
jmp 44444444 etc and the bytes at position 00456789 get replaced by the correct code. to be able to see the bytesyou have to have CODE ON command.
The W32dsm89 debug has a patch code option, which works as above. |
At Offset 00082f9d these are the bytes which is at the jne that needs to be modified; ce 00 00 00 0f bf 15 c8 82 4d 00 85 d2
75 10 c7 .....75 is where the "go to" offset takes me. I change it to eb and nothing happens so I dont know where to go from there. I dont know what to put there and why.
The W32dasm patch option gives original bytes of 75 10 C7 45 FC CF 00 00 00 66 C7 05 E8 80 4D 00 01 00 C7 45 the patch bytes are the same.
The only info I have to help is below
.:Hex:. .:ASM:. .:MEANING:.
75,0f85 jne jump if not equal
74,0f84 je jump is equal
eb jmp jump directly to
90 nop no operation
77,0f87 ja jump if above
0f86 jna jump if not above
0f83 jae jump if above or equal to
0f82 jnae jump if not above or equal
0f82 jb jump if below
0f83 jnb jump is not below
of86 jbe jump if below or equal
0f87 jnbe jump if not below or equal
0f8f jg jump if greater
0f8e jng jump if not greater
0f8d jge jump if greater or equal
0f8c jnge jump if not greater or equal
0f8c jl jump if less
0f8d jnl jump if not less
0f8e jle jump if less or equal
0f8f jnle jump if not less or equal