On Sat, 1 Mar 2008 20:08:25 -0800 (PST)
fetag <spamtrap@[EMAIL PROTECTED]
> wrote:
> My question is: where the mov eax,0x4 in disassembly code? and where
> the two add statements come from? where the "00000000
Because, for some unknown reason, ndisasm did not recognize
"B8" as a valid instruction code. Fortunately, I am not able to
replicate the problem on the current version (2.02). Instead, I get:
[chuck@[EMAIL PROTECTED]
bintest]$ ndisasm -b 32 first.exe
00000000 B804000000 mov eax,0x4
00000005 BB02000000 mov ebx,0x2
0000000A C3 ret
Which version of nasm are you using?
--
Chuck
http://www.pacificsites.com/~ccrayne/charles.html


|