Re: Re: Project 6; Task2 - patch Friday, 05-Feb-99 01:34:47
[..] :00405C38 FF36 push dword ptr [esi]; push param2 :00405C3A FF75DC push [ebp-24] ; push param1 :00405C3D E87E700000 call 0040CCC0 ; call check :00405C42 83C408 add esp, 00000008 ; esp+8 (stack pointer) :00405C45 85C0 test eax, eax ; eax & eax :00405C47 0F8434010000 je 00405D81 ; jump over nag 1 * Possible Reference to String Resource ID=61244: "Sorry, the registration code does not match! Try again or Ca" [..] :0040B735 FF75E8 push [ebp-18] ; push param2 :0040B738 FF31 push dword ptr [ecx]; push param1 :0040B73A E881150000 call 0040CCC0 ; call check :0040B73F 83C408 add esp, 00000008 ; esp+8 (stack pointer) :0040B742 85C0 test eax, eax ; eax & eax :0040B744 0F8572020000 jne 0040B9BC ; jump to nag2 [..] nag2: * Possible Reference to String Resource ID=61244: "Sorry, the registration code does not match! Try again or Ca" Ok, there is to conditional jump after calling check_serial routine. We can easily replace these jump with unconditional jump and nop the other instruction. I didn't find any check if we have modified the protection code.. only one check if we modify "evaluation version" string.. Shadow |
Shadow: Project 6; General (03-Feb-99 05:42:39) |
|
Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.