Originally Posted by derh.acker
This won't work.
Either you use *(BYTE*)(CShell + addy) = 0x90; without the inline assembler
or you do it like this :
__asm
{
PUSH EAX
MOV EAX, CShell
ADD EAX, addy
MOV BYTE PTR DS:[EAX], 0x90
POP EAX
}
Of course a NOP takes 1 Byte, so if you want to NOP a CALL (takes 5 Bytes, example E8 7F FF FF FF) you have to fill these 5 Bytes with 5 NOPs
Either you use *(BYTE*)(CShell + addy) = 0x90; without the inline assembler
or you do it like this :
__asm
{
PUSH EAX
MOV EAX, CShell
ADD EAX, addy
MOV BYTE PTR DS:[EAX], 0x90
POP EAX
}
Of course a NOP takes 1 Byte, so if you want to NOP a CALL (takes 5 Bytes, example E8 7F FF FF FF) you have to fill these 5 Bytes with 5 NOPs
Then
MOV BYTE PTR DS:[EAX], Is4Bytes
