Log in

View Full Version : Strange


pmpch
April 6th, 2004, 06:01
6FD26B5C 8B0485 C86AD26F MOV EAX,DWORD PTR DS:[EAX*4+6FD26AC8]

Olly always extended this to:

6FD26B5C E3:8B0485 C86AD26F MOV EAX,DWORD PTR DS:[EAX*4+6FD26AC8]

I had to trick it to stop it from doing that. What is the difference of these 2 instructions?

blabberer
April 6th, 2004, 12:47
e3 as an opcode isnt a prefix it represents jecxz if irecallcorrectly

well 66 67 can become prefix but i ve neverseen e3 becoming a prefix

well i just tried using ctrl+ edit and pasted the opcodes here olly seems to do it right

00401474 ^\E3 8B JECXZ SHORT GPFCODE.00401401
00401476 04 85 ADD AL,85
00401478 C8 6AD26F ENTER 0D26A,6F

????