I dont really get this.
I tried an inline patch in OllyDbg with following Line:

MOV DWORD PTR SS:, EDI

And i get : Unknown identifier.

So I tried :
MOV DWORD PTR SS:, EDI

But it doesnt work either.
Ok i thought. Maybe im a stupid little newbie and i didnt know, that this kind of operation isnt allowed. To test it, i tried another adress Relative to EBP.

MOV DWORD PTR SS:, EDI

It worked. It was assembled by OllyDbg.  :shock:

WHAT is it, that i dont get here ?  Why does EBP-54h work and EBP-E4h not ?




Posted on 2005-08-08 12:53:46 by DeepBlue
E4h is a valid identifier. If you mean the hexadecial number, you need to prefix it with a zero - 0E4h - so the assembler knows it's a number and not an identifier.

Spara
Posted on 2005-08-08 13:13:59 by Sparafusile
Ahhh. I see.

Thank you. :-*

Greets
Posted on 2005-08-08 13:15:47 by DeepBlue