Cracking Projects For Newbies

Re: one patch - another way :-)
Thursday, 04-Feb-99 20:27:35
    194.158.117.235 writes:

    As you have seen in the dead listing, we have the following lines:

    :0040CCCE 8B4C2410 mov ecx, dword ptr [esp+10]
    :0040CCD2 8B542414 mov edx, dword ptr [esp+14]

    there is an easier way than the one you used to patch the program, and only ONE byte is needed to change:

    replace the original mov ecx, dword ptr [esp+10] with mov ecx, dword ptr [esp+14].

    So, change 8B4C2410 (line 0040CCCE) with 8B4C2414 and that's done :)

    I think patching inside this CALL is a better way than patching the jumps like most people did. In this program that's change nothing, but in other ones, it could change a lot of things. And, of course, you don't have to worry about any other CALLs to this routine.

    Friendly




    HarvestR


Message thread:

Task 1: Eternal Bliss (03-Feb-99 10:51:18)

Back to main board


Message subject:

Name: (optional)

Email address: (optional)

Type your message here:




Back to main board

Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.