logs archiveIRC Archive / Undernet / #asm / 2006 / January / 27 / 1
stool
.asm16 jmp dword ptr[0]
wisebot
stool: Invalid instructions, impossible to assemble this code
stool
.asm16 jmp far [sp-2]
wisebot
stool: Invalid instructions, impossible to assemble this code
stool
.asm16 push ax
BoR0
.asm16 jmp [sp-2]
_exe
You killed him.
BoR0
lol
stool
:/
.asm16 push eax
         

wisebot
stool: 6650
stool
.asm16 push ax
wisebot
stool: 50
stool
.asm16 mov ax, [esp+10h]
wisebot
stool: 678B442410
stool
.asm jmp short 7h
wisebot
stool: Invalid instructions, impossible to assemble this code
stool
.dasm EB09
wisebot
stool:
-------------------------------------------------
00000000 EB09 jmp short 0xb
stool
.dasm16 EB09
wisebot
-------------------------------------------------
stool:
-------------------------------------------------
00000000 EB09 jmp short 0xb
-------------------------------------------------
stool
.dasm16 EB05
wisebot
stool:
-------------------------------------------------
00000000 EB05 jmp short 0x7
-------------------------------------------------
nergal_
Hi, anyone got tips of any dissassemlbers for win32, P-code
?
TCA
Softice
Or IDA-Pro
Flopik
IDA is da best
stool
http://www.rafb.net/paste/results/lREIcX20.html <--why version 1) only works..?
EwIck-
stool: ssc and rip were already assigned
the data on the stack doesn't move when you push
or pop
stool
well it should sub to esp
so i'm indexing it manually there but somehow it won't add up
EwIck-
no it shouldn't
         

stool
it shouldnt?
EwIck-
ssc = esp+index; sub esp, 2 // ssc still correctly contains the address of the data of interest
stool
in a 32bit flat model, it subtracts esp by 4 when you push eax
EwIck-
and?
so you need to adjust your references on the stack
AFTER the push
mov edx, esp; push eax; mov ecx, esp+04h;; cmp edx, ecx = true
stool
hmm
TCA
Well, you can't "mov ecx, esp + anything" .. but his point stands
EwIck-
of course.
we had a weird bug at work today.. where if (0 > 5) succeeded
stool
This is driving me crazy
the references there dont use bp, prior to the interrupt call there is one paramenter been pushed into stack.
all of the reference there is used after the all the pushes
TCA
That is a weird bug
stool
<EwIck-> ssc = esp+index; sub esp, 2 // ssc still correctly contains the address of the data of interest <-- i fail to understand this.. if index was 2 the ssc would of be 2 bytes short, after sub esp, 2..
EwIck-
x = 2
y = x
x = x -2
has y changed?
n.
no.
stool
erm i think you got it all wrong, after sub esp, 2 .... mov [ssc], ax would be equal to mov[ esp+index ], but esp has changed
EwIck-
sure. I'm wrong, you're right and yet your code does not work
stool
@ssc equ esp+08h, your telling me that the assembler magically replaces esp for some magical value that points to the same index even if esp is changed? heh.
TCA
Heh
No, but what happens is that "ssc" gets turned into "esp+08h" by the pre-processor
EwIck-
it's a macro?
TCA
It's an equate
EwIck-
duh
TCA
Like #define in C
EwIck-
what assembler is that anyway
that's what I asked
it's a macro.
TCA
Alright
I didn't look at the code, just the one line he pasted
If it's a macro, then it's probably bad and should be using EBP instead if the function has a stack frame set up
stool
masm, equ is like a macro
EwIck-
right, but it's evaluated only once
Utterkins
im spesha
EwIck-
woot. pay just got deposited
Utterkins
mine hasnt :<
EwIck-
two more paychecks and I'll have enough to buy you.
Utterkins
me?
EwIck-
you or your "husband", I can settle for either
Utterkins
im exspensive
TCA
I'm a cheap drunk. Buy me pear cider and we'll talk
Utterkins
why do you use ""
TCA
You know the difference between a straight man and a gay man?
About 5 beers
Utterkins
ew
EwIck-
make that 13
oh well. must sleep. work tomorrow
night
Utterkins
go to work for me too
stool
night night
EwIck-
I have enough sh*t to deal with thank you
stupid moron at work keeps comitting code that's not even working
Utterkins
my job sucks worse.. i win
EwIck-
I mean.. it can happen, but when you miss a ; on one line and still commit to cvs without even compiling your sh*t first...
you know
bastard.
TCA
Yeah, yeah. It's my fault
stool
Its always your fault TCA
TCA
Why you all gotta be pickin on me.
stool
Your the person to turn too when things go wrong ofcourse :D
TCA
Yeah.
Except for one thing.
It's good to be the king.
stool
King of the one man kingdom aye aye.
TCA
Looks like a 26 man/bot kingdom to me
stool
bots dont count :)
TCA
I dunno
.kick stool They do my bidding, too
Utterkins
(Action) fondles the TCA
stool
sorry, i need to let out some agony with this code somehow :|
TCA
Go ahead
Beat me up.
stool
Still wont feel good mentally beating someone up, think i need to watch some tv heh heh.
TCA
It wouldn't be any fun mentally beating me up anyway. I'd not be paying attention. And that would just make you pathetic.
stool
That would be a Bor0 :P
I think this bochs has to do with bochs not me, going to boot my machine and test it.
er
i mean this problem
mykii
hello
TCA
Any luck, stool?
stool
no :(
TCA
Oh well, the world needs ditch diggers, too
stool
i wish bochs is more debugging friendly then just an emulator
i've been referencing the parameters the same way for about ole hundreds of functions now, i just dont know why 16bit mode is screwing me up.
Even with using a prolog, bp-index is not working either.
I just don't understand.. god dammnit
I mean on interrupts it should push in cs:ip (4 bytes) into stack. Or perhaps I'm wrong..
Int3
hello humans
stool
http://www.rafb.net/paste/results/P5nhlk51.html <-- this is screwed up, 1) does not work, 2) works
it is screwed up all to gether that i the index at @RIP is esp+4h to begin with, since push ax, should only subtract esp by 2, thus should be at esp+2h
02.32 <stool> Even with using a prolog, bp-index is not working either. <--- i mean bp+index not minus
(Action) screams
.dasm16 50678B44240833D22EF7361800428ACA33D22EF7361A00C1E2088AE858CA02
wisebot
stool:
-------------------------------------------------
00000000 50 push ax
00000001 678B442408 mov ax,[esp+0x8]
00000006 33D2 xor dx,dx
00000008 2EF7361800 div word [cs:0x18]
0000000D 42 inc dx
0000000E 8ACA mov cl,dl
« prev 1 2 3 next »