OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: ndisasm bad opcodes interpretation

From: Dave Korn (davek_throwawayhotmail.com)
Date: Fri Jan 07 2005 - 12:42:17 CST


"shadown" <shadowngmail.com> wrote in message
news:d8360fbf0501070830475ef080mail.gmail.com...

>
> i.e:
> 0000001C 7565 jnz 0x83
> sould had been jnz 0x65

  No it shouldn't. Engage brain before opening mouth: what is 0x65 + 0x1e
(== address of byte immediately after the instruction in question)? Google
"pc-relative branch displacement" for more. Or learn some assembler
programming before trying to use a disassembler.

    cheers,
      DaveK
--
Can't think of a witty .sigline today....