Latigo
Conditional jump NOPed :)
Fri Dec 18 01:41:59 1998


Hi there fellow crackers!!!!!!
i was going to bed when i decided to check the forum first, and to my surprise, task number 3 was on its way..so i decided to take a chance :)
Someone once told me : ..'the human being tends to do things the most complicated way..'
and thats what i did trying to solve task 3.

I went from using softice,to searching the win32 api looking for calls such as 'enableButton' and weird things like those.And after about an hour of useless research and frustrated results, i decided to use our ol'friend w32dasm.

I fired w32dasm,and remembering that when registered cyt will show the word 'Registered' in the about box, i searched for that word. This word appears twice, one at 0043f4f3, and its not preceeded by any conditional jump as i was looking for. (again paying tribute to my human condition, i started trying to resolve task #3 using the information provided in that zone of the dead listing without realizing that there was indeed another place in the code where the word 'Registered' appeared :) )
After about another half hour, i searched again for that nice little word,and found it at 00444ba7...but this time this line of code was preceed by a conditional jump!!!!!
Alegria!!!!! :)

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
:00444b7c(C)

After this, i Goto Code Location 00444b7c,and find the following :

00444b7c 741b je 00444B99

This was it, this is the damn conditional jump that took an hour and a half of sleeping from me :)
From here on, you know, i edited the .exe in Hiew and replaced the 741B with EB1B that is JumpIfEqual replaced by Jump :)
thats all folks!
NOW im going to sleep :)

Latigo