CrackMe« Practices for Newbies
PROJECT 6: caveman by Ghiribizzo

Re: Re: Jeffs thread
Wednesday, 24-Feb-99 14:17:13

    Jeff,

    I recommend that the simplest way for you to start is to use:

    bpint 21 if ah==9

    This is similar to bpx, but breakpoints on the DOS interrupt 21h, when ah=9 (which is write text to screen). We found this through checking a disassembly and seeing it as the first interrupt called.

    Now run the program and SoftIce should break at a point in the program which says:

    int 21h

    You can now single step through it, but don't trace into the int instructions, just step with 'p' rather than 't' on these.

    You should find that the program goes on to try and load a file called caveman.dat..... just create a file and stick anything in it at first, and continue with your tracing. Once you are into it you should be able to bpx anywhere and rerun it with S-Ice breaking at that point.

    Hope this helps you to get started,

    Cronos.


    Cronos


Message thread:

Jeffs thread (Jeff) (23-Feb-99 22:25:29)

Back to main board