CrackMe® Practices for Newbies
PROJECT 6: caveman by Ghiribizzo

Re: studying disassembly...
Saturday, 20-Feb-99 12:04:17

    The number of bytes read from a file IO function are stored in AX.
    So JB checks if the number of bytes read 'IS NOT NULL'. Because if
    no bytes were read AX would contain -1 (FFFFFFFF).

    There is no need for a test, as a conditional jump after a read
    always check the number of bytes.

    For W32DASM... well, you beter use IDA for this one.
    IDA even shows some comments on commonly used ASM blocks. But
    there is a big chance you'll need to modify the CFG file for it
    to work corectly. At the end of my thread I wrote how to fix it.

    And you should really use Soft-Ice for DOS for this one. You'll
    immediately see what kind of data is read into where.. much better
    then printing out 15 pages :)

    noos / DREAD

    noos


Message thread:

snakebyte's thread (snakebyte__@hotmail.com) (20-Feb-99 09:08:43)

Back to main board