| View previous topic :: View next topic |
| Author |
Message |
GMZorita
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 21 Mar 2007
Posts: 1361
|
 Posted: Sun Sep 14, 2008 8:12 am Post subject: |
 |
|
| HawwwaH wrote: | When you use 0x for this, you have to reverse the bytes...
Lets say jmp 00112233 is 75 77 and, jne 00112233 is 74 77. We want to change the jmp to jne.
That would mean you could do:
__asm mov word ptr ds:[0x00112233], 0x 7774
OR
__asm mov word ptr ds:[0x00112233], 7477h
Someone please correct me if I am wrong... |
no space betwen "0x 7774", he prolly already know that...
And he is noping it so it will always be 0x90.
_________________
Gone |
|
| Back to top |
|
 |
nog_lorp
Grandmaster Cheater
 Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
| Posted: Sun Sep 14, 2008 3:46 pm Post subject: |
|
|
Standard terminology for OWORD would be DQWORD (Dairy Queen DoubleQuad Word), per Intel, OWORD is Microsoftese.
Also, about the original post. If you weren't patching another object's memory, you could do this:
| Code: |
__asm {
00500000:
push ebp
mov ebp, esp
mov eax, 5
pop ebp
ret
}
int main()
{
int (*fptr)() = 0x00500000;
printf("%i",(*fptr)());
}
|
_________________
Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish |
|
| Back to top |
|
|
Wintermoot
Expert Cheater
 Reputation: 0
Joined: 08 Nov 2007
Posts: 198
|
| Posted: Sun Sep 14, 2008 10:22 pm Post subject: |
|
|
| GMZorita wrote: | | HawwwaH wrote: | When you use 0x for this, you have to reverse the bytes...
Lets say jmp 00112233 is 75 77 and, jne 00112233 is 74 77. We want to change the jmp to jne.
That would mean you could do:
__asm mov word ptr ds:[0x00112233], 0x 7774
OR
__asm mov word ptr ds:[0x00112233], 7477h
Someone please correct me if I am wrong... |
no space betwen "0x 7774", he prolly already know that...
And he is noping it so it will always be 0x90. |
Oops. Typo. But, I am glad that adding the h thingy has not been argued against.
|
|
| Back to top |
|
|
HalfPrime
Grandmaster Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 532
Location: Right there...On your monitor
|
| Posted: Mon Sep 15, 2008 1:27 am Post subject: |
|
|
soooooo what was wrong with DWORD address = 0x00AAAAAA; *(BYTE*)address = 0x90;?
Nothing against you personally, sylvanus, but I just don't get why all these maplefags make all these threads about converting all these AA scripts into asm because they're either too lazy or too stupid to convert it into C/++.
_________________
|
|
| Back to top |
|
|
GMZorita
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 21 Mar 2007
Posts: 1361
|
| Posted: Mon Sep 15, 2008 11:01 am Post subject: |
|
|
| HawwwaH wrote: | | GMZorita wrote: | | HawwwaH wrote: | When you use 0x for this, you have to reverse the bytes...
Lets say jmp 00112233 is 75 77 and, jne 00112233 is 74 77. We want to change the jmp to jne.
That would mean you could do:
__asm mov word ptr ds:[0x00112233], 0x 7774
OR
__asm mov word ptr ds:[0x00112233], 7477h
Someone please correct me if I am wrong... |
no space betwen "0x 7774", he prolly already know that...
And he is noping it so it will always be 0x90. |
Oops. Typo. But, I am glad that adding the h thingy has not been argued against. |
0x / h, will make the same thing...
_________________
Gone |
|
| Back to top |
|
|
Wintermoot
Expert Cheater
Reputation: 0
Joined: 08 Nov 2007
Posts: 198
|
| Posted: Mon Sep 15, 2008 11:33 pm Post subject: |
|
|
| Really? I always thought you didn't have to reverse the bytes if you use h...
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
.