Cracking Projects For Newbies

reading the W32Dasm Dead Listing
Thursday, 04-Feb-99 14:20:40
    195.36.143.106 writes:

    Well, I've found some interesting lines, with the W32Dasm string references:

    For string "Sorry, the registration... " we have:

    :00405C50 683CEF0000 push 0000EF3C
    :0040B9BC 683CEF0000 push 0000EF3C

    So there are two different places for the "bad boy" message. Some other interesting lines, that we can see twice, just above:

    :00405C3D E87E700000 call 0040CCC0
    :00405C42 83C408 add esp, 00000008
    :00405C45 85C0 test eax, eax
    :00405C47 0F8434010000 je 00405D81

    and

    :0040B73A E881150000 call 0040CCC0
    :0040B73F 83C408 add esp, 00000008
    :0040B742 85C0 test eax, eax
    :0040B744 0F8572020000 jne 0040B9BC

    Maybe there's something interesting in the
    CALL 0040CCC0 ? :-)

    HarvestR


Message thread:

HarvestR: Checking the HLP file (03-Feb-99 11:53:15)

Back to main board


Message subject:

Name: (optional)

Email address: (optional)

Type your message here:




Back to main board

Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.