CrackMe® Practices for Newbies
PROJECT 6: caveman by Ghiribizzo

Disassembled with Sourcer 6.51...
Saturday, 20-Feb-99 18:26:47


    disassembled caveman.com with with Sourcer...I don't have IDA currently...realize I'm lacking a file named 'CAVEMAN.DAT'...note: successfully
    recompiled Sourcer'ed .asm file with tasm 3.1, possibly a chance to reverse whole program after
    I figure out the protection...

    so, I created a file named (of course) caveman.dat and fired up softice 2.62...I see it grab the first two bytes and put them in :0658, also note: sourcer says 'the following equates show data references outside the range of the program'...does this mean that it looks for them
    in 'caveman.dat'...?

    data_10e equ 667h
    data_11e equ 3d04h
    data_12e equ 81f4h
    data_13e equ 8861h
    data_15e equ 8863h
    data_16e equ 8b04h
    data_17e equ 0a30h
    data_18e equ 0aa61h
    data_20e equ 0aa63h
    data_21e equ 0eb2eh

    and later on:

    :0139 mov dx,0667

    0667h = 1639...is this a reference to the above equates( data_10e)...? I have also noticed the 'T.abcfw', but this did not work as the contents of the .dat file...still working on everything...


    ps-thanx for your reply Noos...all assistance gratefully accepted...I would like to learn as much as possible from this exercise...was quite pleased to be able to re-assemble the .asm file that Sourcer created...would like some insight into perhaps changing it so it actually creates the file and arguments it is looking for eventually...

    snakebyte__

    Snakebyte__


Message thread:

snakebyte's thread (snakebyte__@hotmail.com) (20-Feb-99 09:08:43)

Back to main board