Re: one patch - another way :-) Thursday, 04-Feb-99 20:27:35
As you have seen in the dead listing, we have the following lines: :0040CCCE 8B4C2410 mov ecx, dword ptr [esp+10] :0040CCD2 8B542414 mov edx, dword ptr [esp+14] there is an easier way than the one you used to patch the program, and only ONE byte is needed to change: replace the original mov ecx, dword ptr [esp+10] with mov ecx, dword ptr [esp+14]. So, change 8B4C2410 (line 0040CCCE) with 8B4C2414 and that's done :) I think patching inside this CALL is a better way than patching the jumps like most people did. In this program that's change nothing, but in other ones, it could change a lot of things. And, of course, you don't have to worry about any other CALLs to this routine. Friendly HarvestR |
Task 1: Eternal Bliss (03-Feb-99 10:51:18) |
|
Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.