10-18-2011, 02:28 PM
aSH' date=' post: 11478"']Hi all,
I am wondering what I am doing wrong?
Old code to fix upto 140 was:
I am assuming the 8c00 is 140 as 8c in hex is 140 so I change to ff00 as shown:
Still not working though, anyone have any idea what the problem is? Or have I missed anything?
Those values are OP code for the mov instruction,changing the value will change the instruction.
2
MOV Eb Gb 88 dw r gen datamov Move
MOV Evqp Gvqp 89 dW r gen datamov Move
MOV Gb Eb 8A Dw r gen datamov Move
MOV Gvqp Evqp 8B Dw r gen datamov Move
MOV Mw Sw 8C d r gen datamov Move
MOV Rvqp Sw
MOV Sw Ew 8E D r gen datamov Move
MOV AL Ob A0 w gen datamov Move
MOV rAX Ovqp A1 W gen datamov Move
MOV Ob AL A2 w gen datamov Move
MOV Ovqp rAX A3 W gen datamov Move
MOV Zb Ib B0 +r gen datamov Move
MOV Zvqp Ivqp B8 +r gen datamov Move
MOV Eb Ib C6 w 0 gen datamov Move
MOV Evqp Ivds C7 W 0 gen datamov Move
MOV Rd Cd 0F 20 r 03+ D26 0 system o..szapc o..szapc Move to/from Control Registers
MOV Hd Cd 0F 20 r 03+ U27 0 system o..szapc o..szapc Move to/from Control Registers
MOV Rq Cq 0F 20 r P4+ E 0 system o..szapc o..szapc Move to/from Control Registers
MOV Hq Cq 0F 20 r P4+ U27 E 0 system o..szapc o..szapc Move to/from Control Registers
MOV Rd Dd 0F 21 r 03+ 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Hd Dd 0F 21 r 03+ U27 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Rq Dq 0F 21 r 03+ E 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Hq Dq 0F 21 r 03+ U27 E 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Cd Rd 0F 22 r 03+ D26 0 system o..szapc o..szapc Move to/from Control Registers
MOV Cd Hd 0F 22 r 03+ U27 0 system o..szapc o..szapc Move to/from Control Registers
MOV Cq Rq 0F 22 r P4+ E 0 system o..szapc o..szapc Move to/from Control Registers
MOV Cq Hq 0F 22 r P4+ U27 E 0 system o..szapc o..szapc Move to/from Control Registers
MOV Dd Rd 0F 23 r 03+ 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Dq Hq 0F 23 r 03+ U27 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Dq Rq 0F 23 r 03+ E 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Dq Hq 0F 23 r 03+ U27 E 0 system o..szapc o..szapc Move to/from Debug Registers
MOV Rd Td 0F 24 r 03-04 0 system o..szapc o..szapc Move to/from Test Registers
MOV Hd Td 0F 24 r 03-04 U27 0 system o..szapc o..szapc Move to/from Test Registers
MOV Td Rd 0F 26 r 03-04 0 system o..szapc o..szapc Move to/from Test Registers
MOV Td Hd 0F 26 r 03-04 U27 0 system o..szapc o..szapc Move to/from Test Registers
That code code copies the valie from somewhere to EAX, follow dump, of the eax, or that other registry or you can change the value of the EAX from a location you want.