Pages: 1 [2] 3
Author Topic: How identify Prokanal bits?  (Read 18792 times)
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #15 on: February 10, 2013, 06:17:00 PM »

x800000
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #16 on: February 10, 2013, 06:52:21 PM »

also filled in function names for xref a little while waiting. Thank you for your help.

Logged
phila_dot
Hero Member
*****

Karma: +172/-11
Offline Offline

Posts: 1709


« Reply #17 on: February 10, 2013, 06:57:51 PM »

What file is this?
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #18 on: February 10, 2013, 07:01:00 PM »

the famous Audi TT 180 that started it all - 8N0906018BD
Logged
phila_dot
Hero Member
*****

Karma: +172/-11
Offline Offline

Posts: 1709


« Reply #19 on: February 10, 2013, 07:18:01 PM »

Can you post it?

Nef searched turned up no exact matches.
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #20 on: February 10, 2013, 07:23:15 PM »

I a little surprised anyone on here wouldn't have it since it was the first fully mapped file in winols available. (<- complement to be as knowledgable as you are without this cheatsheet)
Logged
phila_dot
Hero Member
*****

Karma: +172/-11
Offline Offline

Posts: 1709


« Reply #21 on: February 10, 2013, 07:26:15 PM »

Found it in the OLS file.

0x821F70
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #22 on: February 10, 2013, 07:33:01 PM »

Yes, but how do you find it in an unmapped file similar to this one?
Logged
phila_dot
Hero Member
*****

Karma: +172/-11
Offline Offline

Posts: 1709


« Reply #23 on: February 10, 2013, 07:35:01 PM »

That's the reference.
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #24 on: February 10, 2013, 07:35:55 PM »

i.e in this one. What I'm saying is in these type of files, I don;t think the b_cdxxx are set in a way that they are easy to find. You can't just match positions. They are in a different order. I want a concrete way to said this is the bit via disassembly.

Thanks,
Rey
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #25 on: February 10, 2013, 07:44:40 PM »

That's the reference.

a reference to what? word_380BEA? or CDTES => 181B2 ?


Code:
C2  F4  B2  01

or

Code:
F3  F8 37 88
« Last Edit: February 10, 2013, 07:46:37 PM by elRey » Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #26 on: February 10, 2013, 07:56:51 PM »

So do I get IDA to format this into readable instructions?
Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #27 on: February 10, 2013, 08:00:35 PM »

nevermind. Code

Perfect, Thanks phila_dot.

Code:
extp    #206h, #1
movbz   r4, CDTES_byte_8181B2
and     r4, #1
jmpr    cc_Z, loc_821F82
mov     r4, #2000h
or      prokonal_w_word_380BEA, r4
jmpr    cc_UC, loc_821F8A
« Last Edit: February 10, 2013, 08:02:29 PM by elRey » Logged
elRey
Hero Member
*****

Karma: +32/-1
Offline Offline

Posts: 565


« Reply #28 on: February 10, 2013, 08:03:41 PM »

So all that to say I' was wrong. Thanks masterj.
Logged
phila_dot
Hero Member
*****

Karma: +172/-11
Offline Offline

Posts: 1709


« Reply #29 on: February 10, 2013, 08:20:45 PM »

DQ file

CDTES 0x8181B5

B_cdtes set at 0x821FDE
Logged
Pages: 1 [2] 3
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.018 seconds with 16 queries. (Pretty URLs adds 0s, 0q)