Andy's Thread Monday, 29-Mar-99 07:03:39 Here is what I found out so far about the crackme: It works like a VB program.The main interpreting loop is at 110h - 11Ah.The program loads in bx the value [si] and increases si with 2,then it jumps at bx+2 (don't know why +2, yet).Each of the segments of code the program jumps to end with a "jmp 110h",the only exception is the code at 1FFh - 202h (End Program). The part of code where the program reads the next character is at 1F3h - 1FAh (using int 21, ah==8).For the User Name, it does some operations with the value "charcter"*43 and then stores some values at 294h. The code is pretty hard to follow,that's why I've only come so far. l8r,Andy Andy |
Andy's Thread (Andy) (29-Mar-99 07:03:39) |