Results 1 to 2 of 2

Thread: please Help on the Code

  1. #1
    shan75
    Guest

    Post please Help on the Code

    004012F5 MOV DWORD PTR DS:[403C5C],<JMP.&kernel32.lstrca>

    DS stands for data segment... but i am unable to find the location to get the data... I am using OllyDbg..

    the instruction started at 00401000 and end at 004016E2 I can't find DS:[403050] this location..
    how can i find this location???

    please help me.....

    thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    dila
    Guest
    With OllyDbg you can step up to the instruction, pressing F8 until it is highlighted, then right-click on it and select Follow in Dump -> Memory address. The dump window will show you the data at DS:[403050].
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. LINK: Grafting Compiled Code: The Ultimate in Code Reuse
    By Cthulhu in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: November 10th, 2007, 03:40
  2. Code - *ock
    By nikolatesla20 in forum Advanced Reversing and Programming
    Replies: 10
    Last Post: August 10th, 2005, 05:33
  3. VB P-Code
    By Spencer in forum The Newbie Forum
    Replies: 14
    Last Post: April 23rd, 2004, 18:53
  4. Need help on P-Code.
    By mr.x in forum The Newbie Forum
    Replies: 7
    Last Post: December 20th, 2003, 01:27
  5. Replies: 10
    Last Post: November 9th, 2002, 04:50

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •