Cracking Projects For Newbies

not a stack correction
Friday, 05-Feb-99 16:09:29
    195.36.155.2 writes:

    Well, you can see that ecx is filled with [esp+14], and edx is filled with [esp+10]. These are addresses in memory, and esp doesn't change when you go from the first line to the second. The stack is not invoked (when working with the stack, you use push and pop instructions). So you only have to replace what is put in ecx by what is put in edx :-)

    I hope I'm not toom uch confuse :-)


    HarvestR


Message thread:

CBN: Project 6 (04-Feb-99 02:13:13)

Back to main board


Message subject:

Name: (optional)

Email address: (optional)

Type your message here:




Back to main board

Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.