Posted by Coa_chez on 1/14/2000, 10:17 pm
, in reply to "Re: What i found so far"
195.130.132.50
Well after some digging arround in Wdasm, in the imported function section i saw some other interesting API's and after trying them out, i found out that GetSystemTimeAsFileTime did the trick. This API generates a number based on the System time , stores it at memory location 73F740 and subtracts it with a value in found in the registry (Cross), this result is then divided by CAh (202b) and this gives the days used.
All this action is going on at :446c02