Results 1 to 4 of 4

Thread: Check on what address a jump was taken

  1. #1
    Eliana
    Guest

    Check on what address a jump was taken

    Hi. I'd like to check on what address a jump was taken.
    Here's some code:

    ...
    0E253322 83C4 08 ADD ESP,8
    0E253325 81C4 04100000 ADD ESP,1004
    0E25332B C3 RETN
    0E25332C B0 FF MOV AL,0FF <- it jumps here
    0E25332E 8D4C24 04 LEA ECX,[DWORD SS:ESP+4]
    0E253332 51 PUSH ECX
    0E253333 8D5424 04 LEA EDX,[DWORD SS:ESP+4]
    ...

    What I mean is, I'd like to check what the address to the jump to 0E25332C is. (last jump)

    Any ideas?
    Answers are greatly appreciated.

    Eliana
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    tDJ
    Guest

    Check on what address a jump was taken

    There are a few ways. But simply try to trace from there to the next RETN code, step into this code which leads to the previous section, then go one line up and you see the call.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3

    Check on what address a jump was taken

    if you put in this line E25332C and right click -find references and have no results,, put a bP in E25332C and when stop, look the first line of the stack for see the adress of returning of the previosu call.

    With this info you can put a bp here and trace till jump.

    Ricardo Narvaja

  4. #4
    Eliana
    Guest

    Check on what address a jump was taken

    Great! Thank you for your answers It has helped me alot! I tried to use "Find ref." as ricnar456 said, and it worked. Thanks again

    Eliana
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. CRC Check??
    By q137 in forum The Newbie Forum
    Replies: 4
    Last Post: September 28th, 2005, 00:37
  2. CRC Check
    By n00b in forum The Newbie Forum
    Replies: 6
    Last Post: April 21st, 2005, 06:36
  3. Changing a jump
    By voodoo in forum OllyDbg Support Forums
    Replies: 2
    Last Post: December 15th, 2004, 05:02
  4. newbie Q: far jump?
    By chitech in forum The Newbie Forum
    Replies: 5
    Last Post: September 5th, 2002, 20:24
  5. CRC-Check
    By SirLeechaLot in forum Advanced Reversing and Programming
    Replies: 14
    Last Post: April 5th, 2001, 18:18

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •