Re: HiYa Joseph; and all
Monday, 22-Mar-99 02:49:22
Whoa I am lucky to have some time for this first battle; Joseph already have all 4? Will look Wayyyyy down there when I get stuck...:)Thanks!
Hiya all
my show-dep utility shows a number of api's...most do not work (break) Release DC Setdlgitemtexta sendmessagea senddlgitemmessagea <<<<<<---this one worked fine
* Reference To: USER32.SendDlgItemMessageA, Ord:020Bh <<--bpx SendDlgItemMessageA F-11 back | :00401D4B E842010000 Call 00401E92 :00401D50 6683F816 cmp ax, 0016<<-----land here :00401D54 754D jne 00401DA3 <<--f-10; humm; go ? well I see a push down there...so I can do a "d" from here to see whats going to happen if I jump..."d 00403835"...ah; fake number...okay what about the next one I see a mov 004031a8 into ebx down there...do "d 004031a8...= XXXX-0em-bla bla ect. looks like a REAL Number...okay I do a 'd 00403835' at the push I see at 00403835...hummm my fake number is shown...okay Sooooo I know right now that I have to not allow this jump\ to occur...so I can at this time change the eip register to 00401d56 to move down to the next line...
:00401D56 40 inc eax <<--move to here :00401D57 6835384000 push 00403835<<--fake # :00401D5C 50 push eax :00401D5D 6A0D push 0000000D :00401D5F 68CA000000 push 000000CA :00401D64 FF7508 push [ebp+08]
* Reference To: USER32.SendDlgItemMessageA, Ord:020Bh | :00401D67 E826010000 Call 00401E92 :00401D6C BBA8314000 mov ebx, 004031A8<<--looks like Real :00401D71 53 push ebx :00401D72 6835384000 push 00403835<<<--fake number
* Reference To: KERNEL32.lstrcmpA, Ord:02D6h | :00401D77 E852010000 Call 00401ECE :00401D7C 660BC0 or ax, ax :00401D7F 7522 jne 00401DA3.....<<---here I have a decision...do I let jump? No. I see when I look at next line 00403570...so before I f-10...I do a d 00403570...ah says correct good guy so if I allow this jump then I'm dead...so I change eip register to 00401d81 and move to next line.
:00401D81 B870354000 mov eax, 00403570 <<<--"d"= "correct serial.... :00401D86 48 dec eax :00401D87 BB4F354000 mov ebx, 0040354F<<--d = "You have conquered... :00401D8C 4B dec ebx :00401D8D 6A00 push 00000000 :00401D8F 50 push eax :00401D90 53 push ebx :00401D91 FF7508 push [ebp+08]
* Reference To: USER32.MessageBoxA, Ord:01BBh | :00401D94 E8E7000000 Call 00401E80<<<---pops good guy box :00401D99 6A00 push 00000000 :00401D9B FF7508 push [ebp+08]
Okay so am conqured thus far...Surprisingly I pulled this one off okay...on two game two... I have very little puter time here last few days so may be in and out very quickly...I can't take time to read the threads to see if I'm out of task...I figure you must be beyond this by now...if I'm out of thread just remove me and I apologize ...very rushed Hi Joseph!!! Thank you for your kind offer of help...I'll probably need ya on this next level; eh?
kind regards to all
jeff
Jeff
|