I am messing around with some reverse engineering, but I don’t know how to change a jnz to jz with a hex editor. I understand it will vary between systems but I’m not sure where to look to find this information. I’m working on Mac OS X 64 bit and I disassembled code with IDA Pro.
Share
If you’ve found a
jz, it will either look like74 XXor0F 84 XX XX XX XX. If it’s a74, change it to75. If it’s the one with84, change it to85. This information can be found, among other places, in Intel’s manual (volume 2A).It will not vary between systems, as long as they’re all x86 based, and if they aren’t then
jzandjnzmay not even exist..