home *** CD-ROM | disk | FTP | other *** search
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: PKLITE Packed
(archive/pklitePacked).
You can browse this item here: TUTOR4.EXE
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| dexvert
| PKLITE Packed (archive/pklitePacked)
| magic
| Supported |
| 100%
| dexvert
| MS-DOS/Windows or OS/2 Executable (executable/exe)
| magic
| Supported |
| 1%
| dexvert
| Ady's GLUE Packed (archive/adysGLUEPacked)
| ext
| Unsupported |
| 1%
| dexvert
| BlacK FiST Packed (archive/blackFiSTPacked)
| ext
| Unsupported |
| 1%
| dexvert
| CauseWay Compressor Packed (archive/causeWayCompressorPacked)
| ext
| Unsupported |
| 1%
| dexvert
| CExe Packed (archive/cExePacked)
| ext
| Unsupported |
| 1%
| dexvert
| cIPHATOR Protected (archive/ciphatorProtected)
| ext
| Unsupported |
| 1%
| dexvert
| CRYPACK Protected (archive/crypackProtected)
| ext
| Unsupported |
| 1%
| dexvert
| CRYPTEXE Proterctd (archive/cryptexeProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Crypt Light Show Protected (archive/cryptLightShowProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DaRKSToP Proterctd (archive/darkstopProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DiskImager SFX Image (archive/diskImagerSFXImage)
| ext
| Unsupported |
| 1%
| dexvert
| Dismember EXE CRYPT Protected (archive/dismemberProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DJP Packed (archive/djpPacked)
| ext
| Unsupported |
| 1%
| dexvert
| .NETZ Packed (archive/dotNETZPacked)
| ext
| Unsupported |
| 1%
| dexvert
| DSHIELD Protected (archive/dshieldProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Exe32Pack Packed (archive/exe32PackPacked)
| ext
| Unsupported |
| 1%
| dexvert
| EXE Manager Protected (archive/exeManagerProtected)
| ext
| Unsupported |
| 1%
| dexvert
| EXETOOLS Protected (archive/exetoolsProtected)
| ext
| Unsupported |
| 1%
| dexvert
| EZip Packed (archive/ezipPacked)
| ext
| Unsupported |
| 1%
| dexvert
| FSG Packed (archive/fsgPacked)
| ext
| Unsupported |
| 1%
| dexvert
| HackStop Protected (archive/hackStopProtected)
| ext
| Unsupported |
| 1%
| dexvert
| kkrunchy Packed (archive/kkcrunchPacked)
| ext
| Unsupported |
| 1%
| dexvert
| mbp SHRINK Packed (archive/mbpSHRINKPacked)
| ext
| Unsupported |
| 1%
| dexvert
| MEGALITE Packed (archive/megalitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| Mess Protected (archive/messProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Mew Packed (archive/mewPacked)
| ext
| Unsupported |
| 1%
| dexvert
| MPRESS Packed (archive/mpressPacked)
| ext
| Unsupported |
| 1%
| dexvert
| NOS Packer Packed (archive/nosPackerPacked)
| ext
| Unsupported |
| 1%
| dexvert
| NTShell Protected (archive/ntShellProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Pack MasterPacked (archive/packMasterPacked)
| ext
| Unsupported |
| 1%
| dexvert
| PE Diminisher Packed (archive/peDiminisherPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Petite Packed (archive/petitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| PeX Packed (archive/pexPacked)
| ext
| Unsupported |
| 1%
| dexvert
| PKLITE32 Packed (archive/pklite32Packed)
| ext
| Unsupported |
| 1%
| dexvert
| PowerBatch Packed (archive/powerBatchPacked)
| ext
| Unsupported |
| 1%
| dexvert
| protector Protected (archive/protectorProtected)
| ext
| Unsupported |
| 1%
| dexvert
| py2exe Packed (archive/py2exePacked)
| ext
| Unsupported |
| 1%
| dexvert
| PyInstaller Packed (archive/pyInstallerPacked)
| ext
| Unsupported |
| 1%
| dexvert
| SECURE Protected (archive/secureProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Shrinker Packed (archive/shrinkerPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Spoon Studio Packed (archive/spoonStudioPacked)
| ext
| Unsupported |
| 1%
| dexvert
| tElock Packed (archive/telockPacked)
| ext
| Unsupported |
| 1%
| dexvert
| The Builder Packed (archive/theBuilderPacked)
| ext
| Unsupported |
| 1%
| dexvert
| The Patcher Packed (archive/thePatcherPacked)
| ext
| Unsupported |
| 1%
| dexvert
| 32Lite Packed (archive/thirtyTwoLitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| TinyProt Protected (archive/tinyProtProtected)
| ext
| Unsupported |
| 1%
| dexvert
| (Win)Upack Packed (archive/winUpackPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Yoda's Crypte Protected (archive/yodasCrypterProtected)
| ext
| Unsupported |
| 1%
| dexvert
| MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable)
| ext
| Unsupported |
| 1%
| dexvert
| Sony Playstation Executable (executable/sonyPlaystationExe)
| ext
| Unsupported |
| 1%
| dexvert
| Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule)
| ext
| Unsupported |
| 100%
| file
| MS-DOS executable, MZ for MS-DOS
| default
| |
| 99%
| file
| data
| default
| |
| 50%
| TrID
| Generic Win/DOS Executable
| default
| |
| 49%
| TrID
| DOS Executable Generic
| default
| |
| 100%
| siegfried
| x-fmt/409 MS-DOS Executable
| default
| |
| 100%
| gt2
| Ist eine ausf�hrbare DOS Datei
| default
| |
| 100%
| detectItEasy
| Packer: PKLITE(1.12-1.13)
| default
| |
| 100%
| xdgMime
| application/x-dosexec
| default (weak)
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 58 01 05 00 01 00 | 02 00 6b 01 ff ff 9e 00 |MZX.....|..k.....|
|00000010| 00 02 00 00 00 01 f0 ff | 1c 00 00 00 07 00 00 00 |........|........|
|00000020| b8 d8 01 ba 94 00 05 00 | 00 3b 06 02 00 73 1a 2d |........|.;...s.-|
|00000030| 20 00 fa 8e d0 fb 2d 19 | 00 8e c0 50 b9 c4 00 33 | .....-.|...P...3|
|00000040| ff 57 be 44 01 fc f3 a5 | cb b4 09 ba 32 01 cd 21 |.W.D....|....2..!|
|00000050| cd 20 4e 6f 74 20 65 6e | 6f 75 67 68 20 6d 65 6d |. Not en|ough mem|
|00000060| 6f 72 79 24 fd 8c db 53 | 83 c3 2d 03 da 8c cd 8b |ory$...S|..-.....|
|00000070| c2 80 e4 0f b1 04 8b f2 | d3 e6 8b ce d1 e9 4e 4e |........|......NN|
|00000080| 8b fe 2b e8 2b d8 8e c5 | 8e db f3 a5 fc 8e dd 07 |..+.+...|........|
|00000090| 06 bf 00 01 33 f6 ad 95 | ba 10 00 eb 2c 90 ad 95 |....3...|....,...|
|000000a0| b2 10 eb 35 ad 95 b2 10 | eb 36 ad 95 b2 10 eb 3b |...5....|.6.....;|
|000000b0| ad 95 b2 10 eb 5d ad 95 | b2 10 eb 5e ad 95 b2 10 |.....]..|...^....|
|000000c0| eb 5f ad 95 b2 10 72 08 | a4 d1 ed 4a 74 f4 73 f8 |._....r.|...Jt.s.|
|000000d0| 33 c9 33 db d1 ed 4a 74 | c5 d1 d3 d1 ed 4a 74 c4 |3.3...Jt|.....Jt.|
|000000e0| d1 d3 85 db 74 17 d1 ed | 4a 74 bf d1 d3 80 fb 06 |....t...|Jt......|
|000000f0| 72 0b d1 ed 4a 75 04 ad | 95 b2 10 d1 d3 2e 8a 8f |r...Ju..|........|
|00000100| 60 01 80 f9 0a 74 75 33 | db 83 f9 02 74 2a d1 ed |`....tu3|....t*..|
|00000110| 4a 74 9d 72 23 d1 ed 4a | 74 9c d1 d3 d1 ed 4a 74 |Jt.r#..J|t.....Jt|
|00000120| 9b d1 d3 d1 ed 4a 75 04 | ad 95 b2 10 d1 d3 80 fb |.....Ju.|........|
|00000130| 02 73 16 2e 8a bf 70 01 | ac 8a d8 56 8b f7 2b f3 |.s....p.|...V..+.|
|00000140| 1e 06 1f f3 a4 1f 5e eb | 80 d1 ed 4a 75 04 ad 95 |......^.|...Ju...|
|00000150| b2 10 d1 d3 80 fb 08 72 | da d1 ed 4a 75 04 ad 95 |.......r|...Ju...|
|00000160| b2 10 d1 d3 80 fb 17 72 | ca d1 ed 4a 75 04 ad 95 |.......r|...Ju...|
|00000170| b2 10 d1 d3 81 e3 df 00 | 86 df eb bc ac 02 c8 80 |........|........|
|00000180| d5 00 3c ff 75 81 5b 8b | eb 83 c3 10 33 c0 ac 91 |..<.u.[.|....3...|
|00000190| e3 0f ad 03 c3 8e c0 90 | ad 97 26 01 1d e2 f9 eb |........|..&.....|
|000001a0| eb ad 03 c3 fa 8e d0 ad | 8b e0 fb ad 03 d8 53 ad |........|......S.|
|000001b0| 50 8e c5 8e dd 33 c0 8b | d8 8b c8 8b d0 8b e8 8b |P....3..|........|
|000001c0| f0 8b f8 cb 03 00 02 0a | 04 05 00 00 00 00 00 00 |........|........|
|000001d0| 06 07 08 09 01 02 00 00 | 03 04 05 06 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 07 08 09 0a | 0b 0c 0d 00 00 00 00 00 |........|........|
|000001f0| 3a 00 00 5e 01 b8 9e 00 | 8e d8 8c 06 84 00 00 00 |:..^....|........|
|00000200| 8c d3 8c c0 2b d8 8b c4 | 05 0f 00 c1 e8 04 03 d8 |....+...|........|
|00000210| 00 00 b4 4a cd 21 0e e8 | 9d 00 0b c0 78 70 b8 80 |...J.!..|....xp..|
|00000220| 3d ba 0a 48 01 00 10 72 | 62 a3 15 01 8e 2d a0 50 |=..H...r|b....-.P|
|00000230| 26 a1 2c 00 a3 0d 34 d8 | a3 11 0a 00 08 15 03 19 |&.,...4.|........|
|00000240| 00 a1 75 01 a3 13 01 b4 | 3f 0a 4c 8b 1e 22 b9 8d |..u.....|?.L.."..|
|00000250| 00 ba 86 2f 89 02 3d 0a | 32 db be 0c 28 1c fe c3 |.../..=.|2...(...|
|00000260| c0 04 46 e2 f9 1e 07 bb | 0d 1b e8 f8 05 72 14 a5 |..F.....|.....r..|
|00000270| 21 ff 0e 30 75 ce 63 cb | cc c2 36 3e 36 30 b8 00 |!..0u.c.|..6>60..|
|00000280| 4c 2c 8a 74 6b ba 45 23 | 12 00 b7 94 17 12 a8 12 |L,.tk.E#|........|
|00000290| 64 2a 90 12 ad b4 09 52 | ba 3b 52 a2 59 5a 2c 01 |d*.....R|.;R.YZ,.|
|000002a0| 2c c3 b4 51 80 62 05 0f | 82 85 01 89 1e 94 8e c3 |,..Q.b..|........|
|000002b0| 02 00 96 8e c0 33 ff 32 | c0 b9 ff ff f2 ae 0f 85 |.....3.2|........|
|000002c0| 50 14 6c 01 ae 75 f4 2a | 00 af 0b 61 94 02 01 be |P.l..u.*|...a....|
|000002d0| 1b 99 50 ba 8a 05 88 04 | 00 54 0a c0 74 07 46 47 |..P.....|.T..t.FG|
|000002e0| e2 f3 e9 4b 01 74 d5 04 | db 19 46 3f 01 2e a3 14 |...K.t..|..F?....|
|000002f0| 8a 42 00 8b f9 3f b9 1c | a5 01 02 09 45 14 22 01 |.B...?..|....E.".|
|00000300| 81 3e 0a 4d 5a 01 00 40 | 18 01 66 0f b7 06 05 02 |.>.MZ..@|..f.....|
|00000310| 83 3e 03 02 00 40 2a 74 | 01 48 66 c1 e0 09 12 1e |.>...@*t|.Hf.....|
|00000320| 0e 20 a9 66 03 c3 66 a3 | fd 49 42 2e b0 04 b6 41 |. .f..f.|.IB....A|
|00000330| 0e ff 01 8b 16 fd 53 e3 | b2 29 b2 3f 15 b9 10 52 |......S.|.).?...R|
|00000340| 9b 2a 6b 13 d0 00 52 0a | 4a 2a 58 4c 52 c6 0a 6d |.*k...R.|J*XLR..m|
|00000350| 5d 05 05 82 0a bc 00 66 | a1 31 66 01 06 5d da 77 |]......f|.1f..].w|
|00000360| 01 46 79 46 77 a0 50 33 | 9d 00 a1 73 01 6f 05 8b |.FyFw.P3|...s.o..|
|00000370| c8 c0 54 9d c1 eb 04 43 | b4 48 16 87 a5 70 35 14 |..T....C|.H...p5.|
|00000380| 10 7a 17 01 1e 53 85 65 | c5 16 0c 1a 1f 72 66 4a |.z...S.e|.....rfJ|
|00000390| a0 3d 30 e1 05 32 db c4 | 36 1c 30 12 26 7c f8 e7 |.=0..2..|6.0.&|..|
|000003a0| 04 0c 67 1d 66 26 01 44 | 00 0a 14 83 c6 20 e2 f6 |..g.f&.D|..... ..|
|000003b0| 1e b8 21 35 34 2e 8c 80 | 02 06 2a 00 2e 89 1e 28 |..!54...|..*....(|
|000003c0| 00 0f 25 0e 1f ba 89 5d | e1 fd 1f b4 3e 56 a0 00 |..%....]|....>V..|
|000003d0| 0a b9 40 00 bb 7b 9a ff | ff 89 07 43 43 00 40 e2 |..@..{..|...CC.@.|
|000003e0| fa c6 06 00 00 01 33 c0 | cb b4 49 8e 06 19 fe 89 |......3.|..I.....|
|000003f0| 71 28 22 cb 80 3e 20 09 | 54 74 1e 57 25 2e 8e 59 |q("..> .|Tt.W%..Y|
|00000400| 35 1e 55 c5 55 6f 72 4d | 2d 72 03 3a 03 28 29 fc |5.U.UorM|-r.:.().|
|00000410| 40 75 0b e8 d4 02 e8 20 | 03 28 a9 02 03 eb 6d 10 |@u..... |.(....m.|
|00000420| 3f 10 c4 00 05 0d b7 01 | e8 f2 02 eb 5d 10 4b 75 |?.......|....].Ku|
|00000430| 1d 40 01 cc 3c 00 75 05 | e8 cb 1f 4e 3c 03 75 0f |.@..<.u.|...N<.u.|
|00000440| 80 a2 e8 0e 03 e8 bf 03 | 2e a3 61 e8 38 94 54 13 |........|..a.8.T.|
|00000450| 3b 22 42 32 92 4a 29 32 | df 10 c0 32 2b 10 a9 94 |;"B2.J)2|...2+...|
|00000460| 3d 10 82 10 30 10 b0 52 | c0 10 1b 10 3e 75 21 e8 |=...0..R|....>u!.|
|00000470| 72 02 22 53 e2 d1 e3 c0 | 87 51 00 c7 e8 95 1b 0b |r."S....|.Q......|
|00000480| 50 55 8b ec 9f 88 00 87 | 66 08 5d 58 cf 2e ff 2e |PU......|f.]X....|
|00000490| 28 14 52 05 0a 36 20 00 | 05 0c 11 54 3f e5 01 f6 |(.R..6 .|...T?...|
|000004a0| 5c 4a 41 6a 26 10 a1 6e | 24 0f 0c 40 50 05 24 9c |\JAj&..n|$..@P.$.|
|000004b0| 1c 26 95 21 7f 72 40 17 | 55 35 1b f6 0b 58 03 00 |.&.!.r@.|U5...X..|
|000004c0| 55 9d c4 1e 17 01 03 d8 | 66 18 02 26 c7 47 18 57 |U.......|f..&.G.W|
|000004d0| 26 8b 4f c5 0e 16 04 57 | 14 25 9c 10 d5 3d 73 07 |&.O....W|.%...=s.|
|000004e0| 2e c7 c0 0c 3e ff 00 c3 | 58 24 d5 21 71 8b 16 71 |....>...|X$.!q..q|
|000004f0| 29 7a 01 5b 0f 68 8c 1f | 8b 01 b0 99 94 8c c3 13 |)z.[.h..|........|
|00000500| 50 52 13 8b 54 cc 10 3d | 17 74 70 70 00 80 cf 03 |PR..T..=|.tpp....|
|00000510| f0 5a d1 eb 58 3c 01 74 | 02 40 6b 03 54 14 26 13 |.Z..X<.t|.@k.T.&.|
|00000520| 4c 16 3c 02 75 0a 4a 70 | 0c 10 0c 12 32 c0 56 06 |L.<.u.Jp|....2.V.|
|00000530| 02 30 59 07 5e 72 2f 66 | c1 c0 10 8b c2 0b 85 06 |.0Y.^r/f|........|
|00000540| a4 2b 44 14 05 89 44 18 | 02 8a 05 3b 44 10 7f 19 |.+D...D.|...;D...|
|00000550| 66 ed 7c 14 39 ab 7d 1e | 08 30 6d 8f f8 eb 04 0f |f.|.9.}.|.0m.....|
|00000560| c3 ad 60 97 01 00 f9 c3 | 58 58 b0 cc 04 a4 cb 05 |..`.....|XX......|
|00000570| 0e 08 03 b5 89 0b 3d 53 | 2e a6 a4 bf 49 9c a4 83 |......=S|....I...|
|00000580| a4 31 c1 e7 42 94 a4 f7 | 26 c9 6a 8b 64 4a 6f 03 |.1..B...|&.j.dJo.|
|00000590| c1 7c 10 70 50 00 7e 0d | 66 2b c8 08 c9 7f 05 33 |.|.pP.~.|f+.....3|
|000005a0| c0 f9 eb 41 ce 19 90 4c | 18 5f 07 0d 18 00 5d 00 |...A...L|._....].|
|000005b0| 13 50 59 c8 a9 1e c5 80 | 62 76 04 ac 3c 3a 75 03 |.PY.....|bv..<:u.|
|000005c0| 89 08 3c 5c 03 50 07 0a | c0 75 ed 1f 33 c9 1e c4 |..<\.P..|.u..3...|
|000005d0| 3e 04 98 66 8b c1 6c 03 | f8 a1 00 25 35 12 3c 61 |>..f..l.|...%5.<a|
|000005e0| 72 06 3c 7a 00 00 77 02 | 2c 20 26 3a 05 75 06 47 |r.<z..w.|, &:.u.G|
|000005f0| eb e9 1f eb 0b 1f 42 08 | 41 3b 54 72 cf 2d ca 75 |......B.|A;Tr.-.u|
|00000600| 2f c9 c2 6c 66 42 c8 4d | 50 14 b0 0b 89 30 66 90 |/..lfB.M|P....0f.|
|00000610| 4c 26 06 36 10 06 26 65 | 3e 14 06 2e 18 86 8c 10 |L&.6..&e|>.......|
|00000620| 65 02 8c 06 22 8c 66 da | 16 a1 66 ab 66 2c e4 64 |e...".f.|..f.f,.d|
|00000630| 66 65 06 b6 cd 34 8b 34 | 8b 34 45 27 36 8e 34 a3 |fe...4.4|.4E'6.4.|
|00000640| db b6 49 68 4d 68 51 6d | db 68 55 68 59 68 5d 36 |..IhMhQm|.hUhYh]6|
|00000650| 4d 68 61 68 65 68 7b da | 67 68 34 8b b6 6d 34 8b |Mhaheh{.|gh4..m4.|
|00000660| 34 8b 34 8b db a6 34 8b | 34 8b 34 8e 69 0e 34 8e |4.4...4.|4.4.i.4.|
|00000670| 34 20 00 28 8b 5e 06 84 | 4e 04 c1 40 68 e9 0f 0b |4 .(.^..|N..@h...|
|00000680| cb e3 1a 51 75 01 42 13 | 0c b9 00 80 c5 56 08 00 |...Qu.B.|.....V..|
|00000690| 38 e0 59 72 20 81 46 0a | 00 08 e2 e6 13 4e 19 2a |8.Yr .F.|.....N.*|
|000006a0| 81 e1 ff 7f 1d 00 0a 72 | 04 b0 01 eb 02 32 c0 c9 |.......r|.....2..|
|000006b0| c2 22 2e a2 05 20 48 4c | f2 81 3c 2e 5c 75 02 42 |."... HL|..<.\u.B|
|000006c0| 42 0d 1a 99 36 43 34 6a | ba 7e 38 a3 3a 84 42 8d |B...6C4j|.~8.:.B.|
|000006d0| 80 3e 28 03 74 71 50 10 | 83 32 83 2e c4 c5 67 3e |.>(.tqP.|.2....g>|
|000006e0| 23 8b df 50 64 d9 b6 02 | 2b fb 0f 8b d3 18 81 e2 |#..Pd...|+.......|
|000006f0| 36 26 ff 35 07 fc 1b 33 | ff 26 0c 1d 99 02 f6 8b |6&.5...3|.&......|
|00000700| cf 18 b6 03 df 43 43 2f | 39 0c 43 08 00 36 7d 02 |.....CC/|9.C..6}.|
|00000710| 00 c3 2e a3 40 00 1e 06 | 1f 33 f6 09 07 2a f2 a4 |....@...|.3...*..|
|00000720| 1e ab 8b ca 1f a8 b2 1e | 2e c5 36 62 0f 1f 15 2a |........|..6b...*|
|00000730| 2e 02 22 b8 c2 3d 13 b3 | 24 98 bf 36 35 36 42 db |.."..=..|$..656B.|
|00000740| d0 00 1b 03 23 02 00 0c | 1e 68 01 02 6a 00 6a 1c |....#...|.h..j.j.|
|00000750| e8 e2 fe a1 22 f0 03 02 | 31 8b 1e 39 00 1c 4b c1 |...."...|1..9..K.|
|00000760| e3 05 03 c3 2b 06 09 00 | 40 02 40 a3 1d 02 8b d0 |....+...|@.@.....|
|00000770| 83 c2 20 a1 0b 02 03 c2 | 41 29 44 3e 00 a1 0d 11 |.. .....|A)D>....|
|00000780| da 1d 42 8a 73 03 df 10 | 3c 00 3b 2c e8 d4 50 08 |..B.s...|<.;,..P.|
|00000790| 93 0f 89 1e 23 43 81 7b | 73 29 3d b0 75 11 2e 3b |....#C.{|s)=.u..;|
|000007a0| 1e a2 6e 31 72 0a 1b 16 | 9f dd 13 6a 00 00 d3 e9 |..n1r...|...j....|
|000007b0| 9d 01 a3 1f 02 05 10 00 | a3 21 02 eb 15 2e 02 64 |........|.!.....d|
|000007c0| c4 36 0c 8b 04 0d 01 9a | 06 5c 02 3b d8 0f 85 7d |.6......|.\.;...}|
|000007d0| 00 2b a0 50 16 8e 33 c9 | d1 e2 d1 d1 a7 1f 02 04 |.+.P..3.|........|
|000007e0| 55 0c 55 e9 4f bb aa 01 | db 04 41 50 d0 db 33 d2 |U.U.O...|..AP..3.|
|000007f0| a1 bc d1 e0 d1 d2 81 42 | 02 04 52 50 e8 f2 fd a1 |.......B|..RP....|
|00000800| 1f 01 06 0f 42 40 04 17 | 02 a1 15 19 2c 55 d1 d5 |....B@..|....,U..|
|00000810| 0a 07 2e 00 65 17 00 6c | 19 6c 04 5c f3 0e 36 d2 |....e..l|.l.\..6.|
|00000820| 07 02 e3 29 51 63 0e 04 | 30 68 30 00 3e 04 e8 a4 |...)Qc..|0h0.>...|
|00000830| 95 c1 4e 2e 4b 32 6a ac | 02 05 2e 19 26 01 07 59 |..N.K2j.|....&..Y|
|00000840| 7e 5c e2 d7 3b 0f 82 b7 | 00 1c 26 75 06 33 c0 f8 |~\..;...|..&u.3..|
|00000850| e9 c0 80 aa 88 05 00 b4 | 55 69 fe 52 11 57 84 5b |........|Ui.R.W.[|
|00000860| 80 a9 fe 8b 36 23 02 03 | f2 2f 88 a8 8a 89 c1 09 |....6#..|./......|
|00000870| 13 1b 48 11 11 a3 0a 4f | 8c 0e 4a e5 a1 a1 40 09 |..H....O|..J...@.|
|00000880| aa 00 80 e7 38 00 c5 74 | 02 bf 80 00 b9 62 03 03 |....8..t|.....b..|
|00000890| f2 a4 10 8e d8 0b c0 74 | 85 11 0b 16 06 bf 5c 3a |.......t|......\:|
|000008a0| 4e aa 05 16 0a bf 6c 16 | 4a 95 1f 4b 52 a1 57 48 |N.....l.|J..KR.WH|
|000008b0| 01 59 39 a9 51 0f a1 20 | 0c fa 8e 16 0f 87 26 11 |.Y9.Q.. |......&.|
|000008c0| 02 fb 19 ae 1d 8e c0 49 | 2e 8a 0b 6a ab eb 17 c8 |.......I|...j....|
|000008d0| 12 dd 0a b4 49 f6 30 07 | 20 6c b9 a1 32 4f b8 09 |....I.0.| l..2O..|
|000008e0| 21 5f 01 58 4c 43 28 29 | 40 53 52 54 0e 93 12 1b |!_.XLC()|@SRT....|
|000008f0| b5 04 04 2b 19 b2 5b 45 | 52 00 00 52 4f 52 5d 3a |...+..[E|R..ROR]:|
|00000900| 20 24 43 61 6e 20 6e 6f | 74 20 69 0a 28 6e 69 05 | $Can no|t i.(ni.|
|00000910| 66 69 6c 65 20 6d 12 50 | 00 61 67 65 72 2e 01 0d |file m.P|.ager...|
|00000920| 0a 24 45 78 65 63 4a aa | 75 74 1d 67 21 74 15 02 |.$ExecJ.|ut.g!t..|
|00000930| f3 1a 6c 20 73 75 62 28 | 6c 00 20 ff 08 00 00 6a |..l sub(|l. ....j|
|00000940| 00 4c 03 6f 03 fb 03 0e | 04 b4 04 0d 05 fc 06 00 |.L.o....|........|
|00000950| c1 00 00 02 00 00 69 00 | 58 4c 02 82 00 00 00 00 |......i.|XL......|
|00000960| 03 00 01 00 10 00 00 00 | 5f 60 61 62 63 5d 52 4a |........|_`abc]RJ|
|00000970| 48 5c 5c 5f 0c 0d 0e 0f | 9d 11 12 13 84 15 16 17 |H\\_....|........|
|00000980| 18 19 1a 1b 1c 1d 1e 1f | 74 76 76 72 76 53 7a 7f |........|tvvrvSz.|
|00000990| 7c 29 2a 2b 2c 2d 2e 2f | 21 92 32 33 31 35 36 37 ||)*+,-./|!.231567|
|000009a0| 38 39 3a 3b 3c 3d 3e 3f | 94 96 96 92 96 73 8b 9f |89:;<=>?|.....s..|
|000009b0| 8d 49 4a 4b 4c 4d 4e 4f | c7 6d 52 53 42 b7 56 57 |.IJKLMNO|.mRSB.VW|
|000009c0| 58 59 5a 5b 5c 5d 5e 5f | 54 56 56 52 56 33 4b 5f |XYZ[\]^_|TVVRV3K_|
|000009d0| 4d 09 0a 0b 0c 0d 0e 0f | 10 11 12 13 14 15 16 17 |M.......|........|
|000009e0| 18 19 1a 1b 1c 1d 1e 1f | 20 21 22 23 24 25 26 27 |........| !"#$%&'|
|000009f0| 28 29 2a 2b 2c 2d 2e 2f | 30 31 32 33 34 35 36 37 |()*+,-./|01234567|
|00000a00| 38 39 3a 3b 3c 3d 3e 3f | 40 41 42 43 44 45 46 47 |89:;<=>?|@ABCDEFG|
|00000a10| 48 49 4a 4b 4c 4d 4e 4f | 50 51 52 53 54 55 56 57 |HIJKLMNO|PQRSTUVW|
|00000a20| 58 59 5a 5b 5c 5d 5e 5f | 60 61 62 63 64 65 66 67 |XYZ[\]^_|`abcdefg|
|00000a30| 68 69 6a 6b 6c 6d 6e 6f | 70 71 72 73 74 75 76 77 |hijklmno|pqrstuvw|
|00000a40| 78 79 7a 7b 7c 7d 7e 7f | 80 81 82 83 84 85 86 87 |xyz{|}~.|........|
|00000a50| 88 89 8a 8b 8c 0d 0a 20 | 20 20 20 20 20 20 20 20 |....... | |
|00000a60| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00000a70| 20 dc dc db db b2 dc dc | 20 20 20 20 20 20 20 20 | .......| |
|00000a80| 20 20 20 20 20 20 20 20 | 20 20 20 b0 0d 0a 20 20 | | ... |
|00000a90| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00000aa0| 20 20 20 20 20 dc b2 b2 | df df 20 20 20 df df b2 | ...|.. ...|
|00000ab0| b2 dc dc 20 20 20 fe 20 | df 20 20 20 dc 20 20 20 |... . |. . |
|00000ac0| 20 20 b1 20 20 20 20 20 | dc dc b2 b2 dc 0d 0a 20 | . |....... |
|00000ad0| 20 20 20 20 20 20 20 20 | 20 20 20 20 dc 20 20 20 | | . |
|00000ae0| 20 20 20 20 dc df 20 dc | dc dc db db db db dc dc | .. .|........|
|00000af0| dc 20 df db b2 dc 20 20 | 20 20 20 20 20 20 20 20 |. .... | |
|00000b00| df 20 dc b2 20 20 fe df | df df df df db db b2 b2 |. .. ..|........|
|00000b10| dc 0d 0a 20 20 20 20 20 | 20 20 20 dc df 20 20 20 |... | .. |
|00000b20| 20 20 df 20 dc 20 df 20 | 20 dc db db b2 b2 db db | . . . | .......|
|00000b30| db db db db db db dc 20 | df db db 20 20 20 b0 20 |....... |... . |
|00000b40| b0 20 b0 b0 b1 b1 b2 b2 | b2 db db db db db dc dc |. ......|........|
|00000b50| dc 20 df df db db dc 0d | 0a 20 20 20 20 20 20 20 |. ......|. |
|00000b60| de dd 20 20 20 20 20 20 | 20 20 20 20 20 dc db db |.. | ...|
|00000b70| df df 20 20 20 20 20 df | db db db b2 db db 20 de |.. .|...... .|
|00000b80| db db dc 20 dc 20 20 20 | 20 20 20 dc db db db db |... . | .....|
|00000b90| b2 db db db db db db db | db dc 20 df b2 b2 df 0d |........|.. .....|
|00000ba0| 0a 20 20 20 20 20 20 20 | 20 df dc 20 20 20 20 20 |. | .. |
|00000bb0| 20 20 20 dc df df 20 20 | 20 20 dc 20 b0 b0 20 20 | ... | . .. |
|00000bc0| de db b2 b2 b2 db dd 20 | db df 20 20 20 20 20 20 |....... |.. |
|00000bd0| 20 20 de db db db df df | db db db db db db db db | ......|........|
|00000be0| db b2 db 0d 0a 20 20 20 | 20 20 20 20 20 20 20 20 |..... | |
|00000bf0| 20 df 20 20 20 df 20 20 | 20 dc dc dc db db 20 20 | . . | ..... |
|00000c00| 20 20 20 20 db db db b2 | db db db 20 df 20 20 20 | ....|... . |
|00000c10| 20 dc 20 20 20 dc db db | db dd 20 20 de b2 db db | . ...|.. ....|
|00000c20| db db db b2 b2 b2 b2 b1 | b1 b0 b0 20 b0 20 20 b0 |........|... . .|
|00000c30| 0d 0a 20 20 20 20 20 20 | 20 20 fe 20 20 20 dc dc |.. | . ..|
|00000c40| dc dc db db db db db b2 | b2 db dd 20 20 db dc dc |........|... ...|
|00000c50| db db db db db db db dd | 20 df 20 20 20 20 20 20 |........| . |
|00000c60| df db b2 db db db 20 20 | 20 20 df b2 db db db db |...... | ......|
|00000c70| df df b2 df 20 20 dc dc | 0d 0a 20 20 20 20 20 20 |.... ..|.. |
|00000c80| 20 20 20 df dc 20 20 df | b2 b2 db db db b2 b2 b2 | .. .|........|
|00000c90| b2 db dd 20 db b2 b2 db | db db db db db b2 db 20 |... ....|....... |
|00000ca0| 20 dc 20 b0 20 b0 b0 20 | dc 20 df b2 b2 db 20 20 | . . .. |. .... |
|00000cb0| 20 20 20 20 df df 20 dc | dc 20 b1 20 dc b2 b2 df | .. .|. . ....|
|00000cc0| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 de b2 dc 20 |.. | ... |
|00000cd0| 20 db db db db db db b2 | b2 b2 dd db db b2 db db | .......|........|
|00000ce0| db db db db db df 20 20 | b0 20 20 20 b0 20 b0 20 |...... |. . . |
|00000cf0| db db dc 20 df b2 dd 20 | 20 20 20 dc b2 db b2 df |... ... | .....|
|00000d00| 20 20 b0 20 de df 0d 0a | 20 20 20 20 20 20 20 20 | . ....| |
|00000d10| 20 20 b2 db db db dd de | db db db db db db b2 b2 | ......|........|
|00000d20| dd 20 df db db db b2 b2 | df df 20 20 20 20 20 20 |. ......|.. |
|00000d30| 20 20 20 20 20 de b2 db | db db 20 20 df 20 20 20 | ...|.. . |
|00000d40| df b2 df 0d 0a 20 b0 20 | 20 b0 20 b0 b0 b1 b1 b2 |..... . | . .....|
|00000d50| b2 b2 db db 20 db db db | db db db b2 b2 db 20 20 |.... ...|...... |
|00000d60| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00000d70| 20 20 b2 b2 b2 db db dd | 0d 0a 20 20 20 20 20 20 | ......|.. |
|00000d80| 20 20 20 b1 b2 b2 db db | db 20 db b2 db db db db | .....|. ......|
|00000d90| db b2 b2 dd 20 b0 b0 b0 | b0 b0 20 b0 20 20 20 20 |.... ...|.. . |
|00000da0| 20 20 b0 20 20 20 20 20 | df b2 b2 df 20 20 dc 20 | . |.... . |
|00000db0| 20 20 20 20 20 20 dc db | b2 dc 0d 0a 20 20 20 20 | ..|.... |
|00000dc0| 20 20 20 20 20 20 b1 20 | b2 df 20 20 db b2 db db | . |.. ....|
|00000dd0| db db db db b2 db 20 20 | b0 b0 b0 20 b0 20 20 20 |...... |... . |
|00000de0| b0 20 20 20 20 20 df 20 | dc 20 b1 20 20 20 dc b2 |. . |. . ..|
|00000df0| 20 20 20 dc 20 20 20 b0 | 20 df db db db b2 dc 20 | . .| ...... |
|00000e00| 20 20 20 20 b0 0d 0a 20 | 20 20 20 20 20 20 20 20 | ... | |
|00000e10| 20 b0 20 20 20 20 de b2 | b2 db db db db db db db | . ..|........|
|00000e20| b2 db dc 20 b0 20 20 20 | 20 b0 20 20 20 20 20 20 |... . | . |
|00000e30| 20 20 20 de db b2 dc dc | db b2 dd 20 20 df b2 df | .....|... ...|
|00000e40| b0 b0 b0 b0 20 de db b2 | b2 b2 df 20 df 20 b0 b0 |.... ...|... . ..|
|00000e50| b0 b0 20 b0 0d 0a 20 20 | 20 20 20 20 20 20 20 20 |.. ... | |
|00000e60| 20 20 20 20 dc b2 b2 db | db db db db df df df df | ....|........|
|00000e70| df df df 20 20 20 20 20 | 20 20 20 20 b0 20 b0 b0 |... | . ..|
|00000e80| b0 b1 b1 b2 b2 b2 db db | db dd 20 20 20 20 20 20 |........|.. |
|00000e90| 20 b0 20 dc db db b2 b2 | db dc dc 20 20 20 b0 0d | . .....|... ..|
|00000ea0| 0a 20 20 20 20 20 20 20 | 20 20 20 dc dc db b2 db |. | .....|
|00000eb0| df df df 20 20 20 20 20 | 20 20 20 dc b2 db dc dc |... | .....|
|00000ec0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 b1 | | .|
|00000ed0| 20 df db db db dc 20 20 | 20 20 20 20 dc b2 df df | ..... | ....|
|00000ee0| 20 20 20 20 df df df b2 | dc dc 0d 0a 20 20 20 20 | ....|.... |
|00000ef0| 20 20 20 dc fe df df 20 | 20 20 20 20 20 20 20 20 | .... | |
|00000f00| 20 20 20 20 20 20 df db | b2 b2 db db dc 20 20 20 | ..|..... |
|00000f10| 20 20 20 20 20 20 20 20 | 20 20 b0 20 20 20 20 df | | . .|
|00000f20| b2 db db dc dc df df 20 | 20 20 20 20 dc fe 20 df |....... | .. .|
|00000f30| 20 20 20 20 20 20 df 20 | dc 0d 0a 20 20 20 20 20 | . |... |
|00000f40| dc 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |. | |
|00000f50| 20 dc 20 fe 20 dc 20 20 | df df b2 db db dc 20 20 | . . . |...... |
|00000f60| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 de | | .|
|00000f70| b2 b2 df 20 20 20 20 b0 | 20 20 de dd 20 b0 b0 20 |... .| .. .. |
|00000f80| 20 20 20 20 20 20 20 de | dd 0d 0a 20 20 20 20 de | .|... .|
|00000f90| dd 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 df |. | .|
|00000fa0| 20 20 20 20 20 20 dc 20 | df 20 20 20 20 df df dc | . |. ...|
|00000fb0| 20 20 20 20 20 20 20 20 | 20 b0 20 20 20 20 dc df | | . ..|
|00000fc0| 20 20 20 20 b0 20 b0 b0 | b0 20 20 df dc 20 20 20 | . ..|. .. |
|00000fd0| 20 20 20 20 20 20 20 db | 0d 0a 20 20 20 20 20 df | .|.. .|
|00000fe0| dc 20 20 20 20 20 20 20 | 20 20 20 20 df 20 20 20 |. | . |
|00000ff0| 20 20 20 20 20 de db dc | 20 20 5b 63 48 5d de db | ...| [cH]..|
|00001000| 20 df 20 20 20 20 dc 20 | 20 20 df 20 20 20 20 20 | . . | . |
|00001010| 20 20 20 20 20 20 b0 20 | 20 20 20 20 20 df 20 20 | . | . |
|00001020| 20 20 dc 20 20 df 0d 0a | 20 20 20 20 20 20 20 20 | . ...| |
|00001030| fe 20 20 dc 20 20 20 fe | df 20 20 20 20 20 20 20 |. . .|. |
|00001040| 20 20 dc b2 df 20 df df | 20 dc 20 fe df 0d 0a 20 | ... ..| . .... |
|00001050| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001060| 20 20 20 20 20 16 fe df | 0d 0a 0d 0a 48 69 20 79 | ...|....Hi y|
|00001070| 61 20 64 75 64 65 73 21 | 0d 0a 0d 0a 4c 6f 6e 67 |a dudes!|....Long|
|00001080| 20 74 69 6d 65 20 6e 6f | 20 74 75 74 6f 72 20 69 | time no| tutor i|
|00001090| 6e 20 34 20 6d 6f 6e 74 | 68 73 21 20 50 68 65 77 |n 4 mont|hs! Phew|
|000010a0| 2c 20 62 75 74 20 61 73 | 20 79 6f 75 20 63 61 6e |, but as| you can|
|000010b0| 20 73 65 65 20 49 27 6d | 20 62 61 63 6b 20 74 6f | see I'm| back to|
|000010c0| 20 74 68 65 0d 0a 63 72 | 61 63 6b 69 6e 67 20 73 | the..cr|acking s|
|000010d0| 63 65 6e 65 20 28 79 65 | 61 20 49 27 6d 20 62 61 |cene (ye|a I'm ba|
|000010e0| 63 6b 20 69 6e 20 50 43 | 2c 20 61 72 65 6e 27 74 |ck in PC|, aren't|
|000010f0| 20 79 6f 75 20 68 61 70 | 70 79 3f 20 3a 2d 29 29 | you hap|py? :-))|
|00001100| 20 4f 6b 2c 20 6c 65 74 | 27 73 20 72 6f 63 6b 2c | Ok, let|'s rock,|
|00001110| 20 69 6e 0d 0a 74 68 69 | 73 20 74 75 74 6f 72 20 | in..thi|s tutor |
|00001120| 49 27 6c 6c 20 74 65 61 | 63 68 20 79 6f 75 20 68 |I'll tea|ch you h|
|00001130| 6f 77 20 74 6f 20 72 65 | 6d 6f 76 65 20 74 69 6d |ow to re|move tim|
|00001140| 65 6f 75 74 20 6c 69 6d | 69 74 73 20 61 6e 64 20 |eout lim|its and |
|00001150| 68 6f 77 20 74 6f 20 65 | 6e 61 62 6c 65 0d 0a 63 |how to e|nable..c|
|00001160| 72 69 70 70 6c 65 64 20 | 66 65 61 74 75 72 65 73 |rippled |features|
|00001170| 20 69 6e 20 73 6f 6d 65 | 20 61 70 70 73 20 28 61 | in some| apps (a|
|00001180| 6e 64 20 68 6f 77 20 74 | 6f 20 72 65 67 69 73 74 |nd how t|o regist|
|00001190| 65 72 20 79 6f 75 72 20 | 62 61 62 65 20 3a 2d 29 |er your |babe :-)|
|000011a0| 29 0d 0a 0d 0a 28 4e 6f | 20 53 6f 66 74 49 63 65 |)....(No| SoftIce|
|000011b0| 2c 20 73 74 69 6c 6c 20 | 6d 79 20 6c 69 74 74 6c |, still |my littl|
|000011c0| 65 20 6f 6c 27 20 6c 61 | 70 74 6f 70 20 3a 2d 29 |e ol' la|ptop :-)|
|000011d0| 29 20 49 6e 20 74 68 65 | 20 6e 65 78 74 20 74 75 |) In the| next tu|
|000011e0| 74 6f 72 20 23 35 20 77 | 65 27 6c 6c 20 74 61 6c |tor #5 w|e'll tal|
|000011f0| 6b 0d 0a 61 62 6f 75 74 | 20 49 44 41 20 28 49 6e |k..about| IDA (In|
|00001200| 74 65 72 61 63 74 69 76 | 65 20 44 69 73 61 73 73 |teractiv|e Disass|
|00001210| 65 6d 62 6c 65 72 2c 20 | 69 74 20 72 30 78 21 21 |embler, |it r0x!!|
|00001220| 29 0d 0a 0d 0a 53 6f 72 | 72 79 20 66 6f 72 20 6d |)....Sor|ry for m|
|00001230| 79 20 62 61 64 20 67 72 | 61 6d 6d 61 74 69 63 61 |y bad gr|ammatica|
|00001240| 6c 20 65 72 72 6f 72 73 | 2c 20 49 20 68 6f 70 65 |l errors|, I hope|
|00001250| 20 79 6f 75 27 6c 6c 20 | 75 6e 64 65 72 73 74 61 | you'll |understa|
|00001260| 6e 64 20 74 68 69 73 20 | 70 69 65 63 65 21 20 3a |nd this |piece! :|
|00001270| 2d 29 0d 0a 4f 6b 2c 20 | 6c 65 74 27 73 20 67 6f |-)..Ok, |let's go|
|00001280| 21 0d 0a 0d 0a 54 4f 4f | 4c 53 3a 0d 0a 0d 0a 46 |!....TOO|LS:....F|
|00001290| 6f 72 20 74 6f 6f 6c 73 | 20 79 6f 75 20 6e 65 65 |or tools| you nee|
|000012a0| 64 20 74 68 65 20 66 6f | 6c 6c 6f 77 69 6e 67 73 |d the fo|llowings|
|000012b0| 3a 20 28 49 20 75 73 65 | 20 74 68 65 73 65 20 74 |: (I use| these t|
|000012c0| 6f 6f 6c 73 2c 20 49 20 | 61 73 73 75 6d 65 20 79 |ools, I |assume y|
|000012d0| 6f 75 27 6c 6c 20 75 73 | 65 20 27 65 6d 29 0d 0a |ou'll us|e 'em)..|
|000012e0| 0d 0a 57 33 32 44 61 73 | 6d 20 38 2e 39 20 6f 72 |..W32Das|m 8.9 or|
|000012f0| 20 68 69 67 68 20 76 65 | 72 73 69 6f 6e 20 28 75 | high ve|rsion (u|
|00001300| 73 65 20 46 54 50 20 73 | 65 61 72 63 68 3a 20 57 |se FTP s|earch: W|
|00001310| 33 32 44 53 4d 38 39 2e | 5a 49 50 29 0d 0a 48 61 |32DSM89.|ZIP)..Ha|
|00001320| 63 6b 65 72 27 73 20 56 | 69 65 77 20 35 2e 36 36 |cker's V|iew 5.66|
|00001330| 20 28 45 2d 6d 61 69 6c | 3a 20 73 65 6e 40 73 75 | (E-mail|: sen@su|
|00001340| 73 6c 69 6b 6f 76 2e 6b | 65 6d 65 72 6f 76 6f 2e |slikov.k|emerovo.|
|00001350| 73 75 29 0d 0a 46 41 52 | 20 31 2e 35 30 62 20 28 |su)..FAR| 1.50b (|
|00001360| 66 74 70 3a 2f 2f 66 74 | 70 2e 65 6c 66 2e 73 74 |ftp://ft|p.elf.st|
|00001370| 75 62 61 2e 73 6b 2f 70 | 75 62 2f 70 63 2f 75 74 |uba.sk/p|ub/pc/ut|
|00001380| 69 6c 66 69 6c 65 2f 66 | 61 72 31 34 30 62 2e 65 |ilfile/f|ar140b.e|
|00001390| 78 65 29 20 49 74 27 73 | 20 72 65 61 6c 20 6e 69 |xe) It's| real ni|
|000013a0| 63 65 21 0d 0a 6f 72 20 | 75 73 65 20 57 69 6e 64 |ce!..or |use Wind|
|000013b0| 6f 77 73 20 43 6f 6d 6d | 61 6e 64 65 72 20 33 2e |ows Comm|ander 3.|
|000013c0| 35 30 20 e1 65 74 61 20 | 35 20 69 6e 20 73 74 65 |50 .eta |5 in ste|
|000013d0| 61 64 20 6f 66 20 46 41 | 52 20 28 68 74 74 70 3a |ad of FA|R (http:|
|000013e0| 2f 2f 77 77 77 2e 67 68 | 69 73 6c 65 72 2e 63 6f |//www.gh|isler.co|
|000013f0| 6d 29 0d 0a 0d 0a 41 73 | 6b 20 61 6e 79 20 63 72 |m)....As|k any cr|
|00001400| 61 63 6b 65 72 73 20 74 | 6f 20 67 65 74 20 79 6f |ackers t|o get yo|
|00001410| 75 20 74 68 65 73 65 20 | 74 6f 6f 6c 73 2c 20 74 |u these |tools, t|
|00001420| 68 65 79 27 6c 6c 20 62 | 65 20 68 61 70 70 79 20 |hey'll b|e happy |
|00001430| 74 6f 20 73 65 72 76 65 | 20 79 6f 75 21 20 3a 2d |to serve| you! :-|
|00001440| 29 0d 0a 0d 0a 43 4f 4e | 54 45 4e 54 53 3a 0d 0a |)....CON|TENTS:..|
|00001450| 0d 0a 31 29 20 61 2e 20 | 48 6f 77 20 74 6f 20 63 |..1) a. |How to c|
|00001460| 72 61 63 6b 20 44 61 74 | 65 20 45 78 70 69 72 61 |rack Dat|e Expira|
|00001470| 74 69 6f 6e 20 69 6e 20 | 53 79 73 74 65 6d 20 43 |tion in |System C|
|00001480| 6c 65 61 6e 65 72 20 31 | 2e 32 31 20 28 77 69 74 |leaner 1|.21 (wit|
|00001490| 68 20 57 33 32 44 61 73 | 6d 29 0d 0a 20 20 20 20 |h W32Das|m).. |
|000014a0| 20 20 55 52 4c 3a 20 68 | 74 74 70 3a 2f 2f 69 6e | URL: h|ttp://in|
|000014b0| 66 6f 72 74 65 63 68 2e | 72 65 65 64 63 73 2e 63 |fortech.|reedcs.c|
|000014c0| 6f 6d 0d 0a 20 20 20 62 | 2e 20 48 6f 77 20 74 6f |om.. b|. How to|
|000014d0| 20 62 79 70 61 73 73 20 | 4e 41 47 20 61 62 6f 75 | bypass |NAG abou|
|000014e0| 74 20 49 6e 76 61 6c 69 | 64 20 44 61 74 65 20 69 |t Invali|d Date i|
|000014f0| 6e 20 53 79 73 74 65 6d | 20 43 6c 65 61 6e 65 72 |n System| Cleaner|
|00001500| 20 31 2e 32 31 20 28 77 | 2f 57 33 32 44 61 73 6d | 1.21 (w|/W32Dasm|
|00001510| 29 0d 0a 20 20 20 20 20 | 20 55 52 4c 3a 20 68 74 |).. | URL: ht|
|00001520| 74 70 3a 2f 2f 69 6e 66 | 6f 72 74 65 63 68 2e 72 |tp://inf|ortech.r|
|00001530| 65 65 64 63 73 2e 63 6f | 6d 0d 0a 32 29 20 48 6f |eedcs.co|m..2) Ho|
|00001540| 77 20 74 6f 20 65 6e 61 | 62 6c 65 20 63 72 69 70 |w to ena|ble crip|
|00001550| 70 6c 65 64 20 66 65 61 | 74 75 72 65 73 20 69 6e |pled fea|tures in|
|00001560| 20 4d 61 63 72 6f 20 53 | 63 68 65 64 75 6c 61 72 | Macro S|chedular|
|00001570| 20 34 2e 33 2e 31 31 20 | 28 77 69 74 68 20 57 33 | 4.3.11 |(with W3|
|00001580| 32 44 61 73 6d 29 0d 0a | 20 20 20 20 20 20 55 52 |2Dasm)..| UR|
|00001590| 4c 3a 20 68 74 74 70 3a | 2f 2f 77 77 77 2e 6d 6a |L: http:|//www.mj|
|000015a0| 74 6e 65 74 2e 63 6f 6d | 0d 0a 33 29 20 48 6f 77 |tnet.com|..3) How|
|000015b0| 20 74 6f 20 63 72 61 63 | 6b 20 54 72 61 79 43 61 | to crac|k TrayCa|
|000015c0| 6c 20 31 2e 30 20 28 74 | 6f 20 65 6e 74 65 72 20 |l 1.0 (t|o enter |
|000015d0| 61 6e 79 20 63 6f 64 65 | 73 29 0d 0a 20 20 20 20 |any code|s).. |
|000015e0| 20 20 55 52 4c 3a 20 68 | 74 74 70 3a 2f 2f 77 77 | URL: h|ttp://ww|
|000015f0| 77 2e 73 70 61 65 64 65 | 72 2e 63 6f 6d 0d 0a 34 |w.spaede|r.com..4|
|00001600| 29 20 57 68 79 20 49 20 | 63 6f 70 79 20 2a 2e 45 |) Why I |copy *.E|
|00001610| 58 45 20 74 6f 20 2a 2e | 57 33 32 20 66 69 6c 65 |XE to *.|W32 file|
|00001620| 73 0d 0a 35 29 20 41 53 | 4d 20 53 6f 75 72 63 65 |s..5) AS|M Source|
|00001630| 20 43 6f 64 65 20 66 6f | 72 20 61 20 50 61 74 63 | Code fo|r a Patc|
|00001640| 68 65 72 20 62 79 20 4e | 6f 70 2f 50 43 20 27 39 |her by N|op/PC '9|
|00001650| 37 0d 0a 0d 0a 50 41 52 | 54 20 31 61 3a 20 54 6f |7....PAR|T 1a: To|
|00001660| 20 63 72 61 63 6b 20 44 | 61 74 65 20 45 78 70 69 | crack D|ate Expi|
|00001670| 72 61 74 69 6f 6e 20 69 | 6e 20 53 79 73 74 65 6d |ration i|n System|
|00001680| 20 43 6c 65 61 6e 65 72 | 20 31 2e 32 31 20 28 77 | Cleaner| 1.21 (w|
|00001690| 69 74 68 20 57 33 32 44 | 61 73 6d 29 0d 0a 0d 0a |ith W32D|asm)....|
|000016a0| 53 74 65 70 20 31 2e 20 | 52 75 6e 20 53 79 73 74 |Step 1. |Run Syst|
|000016b0| 65 6d 43 6c 65 61 6e 65 | 72 2e 45 58 45 0d 0a 0d |emCleane|r.EXE...|
|000016c0| 0a 53 74 65 70 20 32 2e | 20 59 6f 75 27 6c 6c 20 |.Step 2.| You'll |
|000016d0| 73 65 65 20 74 68 65 20 | 65 72 72 6f 72 20 6d 65 |see the |error me|
|000016e0| 73 73 61 67 65 20 77 68 | 69 63 68 20 69 74 20 73 |ssage wh|ich it s|
|000016f0| 61 79 73 20 74 68 61 74 | 20 69 74 20 68 61 73 20 |ays that| it has |
|00001700| 65 78 70 69 72 65 64 2e | 20 28 59 6f 75 0d 0a 20 |expired.| (You.. |
|00001710| 20 20 20 20 20 20 20 73 | 68 6f 75 6c 64 20 77 72 | s|hould wr|
|00001720| 69 74 65 20 64 6f 77 6e | 20 74 68 69 73 20 6d 65 |ite down| this me|
|00001730| 73 73 61 67 65 29 20 61 | 6e 64 20 65 78 69 74 20 |ssage) a|nd exit |
|00001740| 74 68 65 20 70 72 6f 67 | 72 61 6d 2e 0d 0a 0d 0a |the prog|ram.....|
|00001750| 53 74 65 70 20 33 2e 20 | 4f 6b 2c 20 65 78 69 74 |Step 3. |Ok, exit|
|00001760| 20 74 68 65 20 70 72 6f | 67 72 61 6d 2e 0d 0a 0d | the pro|gram....|
|00001770| 0a 53 74 65 70 20 34 2e | 20 52 75 6e 20 57 43 2c |.Step 4.| Run WC,|
|00001780| 20 67 6f 20 74 6f 20 53 | 79 73 74 65 6d 20 43 6c | go to S|ystem Cl|
|00001790| 65 61 6e 65 72 20 64 69 | 72 65 63 74 6f 72 79 2e |eaner di|rectory.|
|000017a0| 0d 0a 0d 0a 53 74 65 70 | 20 35 2e 20 43 6f 70 79 |....Step| 5. Copy|
|000017b0| 20 53 79 73 74 65 6d 43 | 6c 65 61 6e 65 72 2e 45 | SystemC|leaner.E|
|000017c0| 58 45 20 74 6f 20 53 79 | 73 74 65 6d 43 6c 65 61 |XE to Sy|stemClea|
|000017d0| 6e 65 72 2e 45 58 58 20 | 28 66 6f 72 20 62 61 63 |ner.EXX |(for bac|
|000017e0| 6b 75 70 29 20 61 6e 64 | 20 63 6f 70 79 0d 0a 20 |kup) and| copy.. |
|000017f0| 20 20 20 20 20 20 20 53 | 79 73 74 65 6d 43 6c 65 | S|ystemCle|
|00001800| 61 6e 65 72 2e 45 58 45 | 20 74 6f 20 53 79 73 74 |aner.EXE| to Syst|
|00001810| 65 6d 43 6c 65 61 6e 65 | 72 2e 57 33 32 20 28 66 |emCleane|r.W32 (f|
|00001820| 6f 72 20 75 73 65 20 62 | 79 20 57 33 32 44 61 73 |or use b|y W32Das|
|00001830| 6d 29 0d 0a 0d 0a 53 74 | 65 70 20 36 2e 20 52 75 |m)....St|ep 6. Ru|
|00001840| 6e 20 57 33 32 44 61 73 | 6d 20 61 6e 64 20 64 69 |n W32Das|m and di|
|00001850| 73 61 73 73 65 6d 62 6c | 65 20 53 79 73 74 65 6d |sassembl|e System|
|00001860| 43 6c 65 61 6e 65 72 2e | 57 33 32 0d 0a 0d 0a 53 |Cleaner.|W32....S|
|00001870| 74 65 70 20 37 2e 20 4f | 6e 63 65 20 69 74 27 73 |tep 7. O|nce it's|
|00001880| 20 64 69 73 61 73 73 65 | 6d 62 6c 65 64 2c 20 63 | disasse|mbled, c|
|00001890| 6c 69 63 6b 20 53 54 52 | 49 4e 47 20 44 41 54 41 |lick STR|ING DATA|
|000018a0| 20 52 45 46 45 52 45 4e | 43 45 2c 20 6c 6f 6f 6b | REFEREN|CE, look|
|000018b0| 20 64 6f 77 6e 20 66 6f | 72 20 74 68 65 0d 0a 20 | down fo|r the.. |
|000018c0| 20 20 20 20 20 20 20 73 | 74 72 69 6e 67 20 22 54 | s|tring "T|
|000018d0| 68 65 20 74 72 69 61 6c | 20 70 65 72 69 6f 64 20 |he trial| period |
|000018e0| 68 61 73 20 65 6e 64 65 | 64 2e 20 50 6c 65 61 73 |has ende|d. Pleas|
|000018f0| 65 2e 2e 22 2e 0d 0a 20 | 20 20 20 20 20 20 20 28 |e.."... | (|
|00001900| 59 6f 75 20 73 68 6f 75 | 6c 64 20 72 65 6d 65 6d |You shou|ld remem|
|00001910| 62 65 72 20 74 68 61 74 | 20 65 72 72 6f 72 20 6d |ber that| error m|
|00001920| 65 73 73 61 67 65 29 2c | 20 64 6f 75 62 6c 65 20 |essage),| double |
|00001930| 63 6c 69 63 6b 20 6f 6e | 20 69 74 2e 0d 0a 0d 0a |click on| it.....|
|00001940| 53 74 65 70 20 38 2e 20 | 43 6c 6f 73 65 20 53 44 |Step 8. |Close SD|
|00001950| 52 20 77 69 6e 64 6f 77 | 2c 20 79 6f 75 20 73 68 |R window|, you sh|
|00001960| 6f 75 6c 64 20 73 65 65 | 20 74 68 65 20 6c 69 6e |ould see| the lin|
|00001970| 65 3a 0d 0a 0d 0a 20 20 | 3a 30 30 34 36 34 42 42 |e:.... |:00464BB|
|00001980| 36 20 36 36 38 42 30 44 | 45 34 34 42 34 36 30 30 |6 668B0D|E44B4600|
|00001990| 20 20 20 20 20 20 20 20 | 20 20 6d 6f 76 20 63 78 | | mov cx|
|000019a0| 2c 20 77 6f 72 64 20 70 | 74 72 20 5b 30 30 34 36 |, word p|tr [0046|
|000019b0| 34 42 45 34 5d 0d 0a 20 | 20 3a 30 30 34 36 34 42 |4BE4].. | :00464B|
|000019c0| 42 44 20 42 32 30 32 20 | 20 20 20 20 20 20 20 20 |BD B202 | |
|000019d0| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 64 | | mov d|
|000019e0| 6c 2c 20 30 32 0d 0a 0d | 0a 2a 20 50 6f 73 73 69 |l, 02...|.* Possi|
|000019f0| 62 6c 65 20 53 74 72 69 | 6e 67 44 61 74 61 20 52 |ble Stri|ngData R|
|00001a00| 65 66 20 66 72 6f 6d 20 | 43 6f 64 65 20 4f 62 6a |ef from |Code Obj|
|00001a10| 20 2d 3e 22 54 68 65 20 | 74 72 69 61 6c 20 70 65 | ->"The |trial pe|
|00001a20| 72 69 6f 64 20 68 61 73 | 20 65 6e 64 65 64 2e 20 |riod has| ended. |
|00001a30| 50 6c 65 61 73 65 20 22 | 0d 0a 20 20 20 20 20 20 |Please "|.. |
|00001a40| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001a50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001a60| 20 20 2d 3e 22 72 65 67 | 69 73 74 65 72 20 74 68 | ->"reg|ister th|
|00001a70| 69 73 20 73 6f 66 74 77 | 61 72 65 21 22 0d 0a 0d |is softw|are!"...|
|00001a80| 0a 53 74 65 70 20 39 2e | 20 4f 6b 2c 20 70 72 65 |.Step 9.| Ok, pre|
|00001a90| 73 73 20 55 50 20 61 72 | 72 6f 77 20 6b 65 79 20 |ss UP ar|row key |
|00001aa0| 74 69 6c 6c 20 79 6f 75 | 20 73 65 65 3a 0d 0a 0d |till you| see:...|
|00001ab0| 0a 20 20 3a 30 30 34 36 | 34 42 41 38 20 35 33 20 |. :0046|4BA8 53 |
|00001ac0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001ad0| 20 20 20 20 20 70 75 73 | 68 20 65 62 78 0d 0a 20 | pus|h ebx.. |
|00001ae0| 20 3a 30 30 34 36 34 42 | 41 39 20 38 42 44 38 20 | :00464B|A9 8BD8 |
|00001af0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001b00| 20 20 20 6d 6f 76 20 65 | 62 78 2c 20 65 61 78 0d | mov e|bx, eax.|
|00001b10| 0a 20 20 3a 30 30 34 36 | 34 42 41 42 20 38 30 42 |. :0046|4BAB 80B|
|00001b20| 42 30 43 30 31 30 30 30 | 30 30 30 20 20 20 20 20 |B0C01000|000 |
|00001b30| 20 20 20 20 20 63 6d 70 | 20 62 79 74 65 20 70 74 | cmp| byte pt|
|00001b40| 72 20 5b 65 62 78 2b 30 | 30 30 30 30 31 30 43 5d |r [ebx+0|000010C]|
|00001b50| 2c 20 30 30 0d 0a 20 20 | 3a 30 30 34 36 34 42 42 |, 00.. |:00464BB|
|00001b60| 32 20 37 34 31 43 20 20 | 20 20 20 20 20 20 20 20 |2 741C | |
|00001b70| 20 20 20 20 20 20 20 20 | 20 20 6a 65 20 30 30 34 | | je 004|
|00001b80| 36 34 42 44 30 0d 0a 20 | 20 3a 30 30 34 36 34 42 |64BD0.. | :00464B|
|00001b90| 42 34 20 36 41 30 30 20 | 20 20 20 20 20 20 20 20 |B4 6A00 | |
|00001ba0| 20 20 20 20 20 20 20 20 | 20 20 20 70 75 73 68 20 | | push |
|00001bb0| 30 30 30 30 30 30 30 30 | 0d 0a 0d 0a 20 20 2a 20 |00000000|.... * |
|00001bc0| 52 65 66 65 72 65 6e 63 | 65 64 20 62 79 20 61 20 |Referenc|ed by a |
|00001bd0| 28 55 29 6e 63 6f 6e 64 | 69 74 69 6f 6e 61 6c 20 |(U)ncond|itional |
|00001be0| 6f 72 20 28 43 29 6f 6e | 64 69 74 69 6f 6e 61 6c |or (C)on|ditional|
|00001bf0| 20 4a 75 6d 70 20 61 74 | 20 41 64 64 72 65 73 73 | Jump at| Address|
|00001c00| 3a 0d 0a 20 20 7c 3a 30 | 30 34 36 34 42 34 46 28 |:.. |:0|0464B4F(|
|00001c10| 43 29 0d 0a 0d 0a 53 74 | 65 70 20 31 30 2e 20 4c |C)....St|ep 10. L|
|00001c20| 6f 6f 6b 20 61 62 6f 76 | 65 20 61 74 20 52 65 66 |ook abov|e at Ref|
|00001c30| 65 72 65 6e 63 65 64 20 | 4a 75 6d 70 20 61 74 20 |erenced |Jump at |
|00001c40| 30 30 34 36 34 42 34 46 | 28 43 29 2c 20 70 72 65 |00464B4F|(C), pre|
|00001c50| 73 73 20 50 67 55 70 20 | 6b 65 79 20 32 20 6f 72 |ss PgUp |key 2 or|
|00001c60| 20 33 0d 0a 20 20 20 20 | 20 20 20 20 20 74 69 6d | 3.. | tim|
|00001c70| 65 73 20 74 69 6c 6c 20 | 79 6f 75 20 73 65 65 3a |es till |you see:|
|00001c80| 0d 0a 20 20 3a 30 30 34 | 36 34 42 34 46 20 37 30 |.. :004|64B4F 70|
|00001c90| 36 35 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |65 | |
|00001ca0| 20 20 20 20 20 20 6a 6f | 20 30 30 34 36 34 42 42 | jo| 00464BB|
|00001cb0| 36 0d 0a 0d 0a 20 20 20 | 20 20 20 20 20 20 41 6e |6.... | An|
|00001cc0| 64 20 6c 6f 6f 6b 20 62 | 65 6c 6f 77 20 74 69 6c |d look b|elow til|
|00001cd0| 6c 20 79 6f 75 20 73 65 | 65 3a 0d 0a 20 20 3a 30 |l you se|e:.. :0|
|00001ce0| 30 34 36 34 42 35 34 20 | 36 34 20 20 20 20 20 20 |0464B54 |64 |
|00001cf0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001d00| 42 59 54 45 20 30 36 34 | 68 0d 0a 0d 0a 20 20 20 |BYTE 064|h.... |
|00001d10| 20 20 20 20 20 20 49 66 | 20 79 6f 75 20 73 65 65 | If| you see|
|00001d20| 20 74 68 65 20 73 74 72 | 69 6e 67 20 22 42 59 54 | the str|ing "BYT|
|00001d30| 45 20 78 78 78 68 22 2c | 20 69 67 6e 6f 72 65 20 |E xxxh",| ignore |
|00001d40| 69 74 21 21 20 49 74 27 | 73 20 6e 6f 74 20 61 20 |it!! It'|s not a |
|00001d50| 72 65 61 6c 20 6a 75 6d | 70 2c 0d 0a 20 20 20 20 |real jum|p,.. |
|00001d60| 20 20 20 20 20 69 74 27 | 73 20 6f 6e 6c 79 20 73 | it'|s only s|
|00001d70| 74 72 69 6e 67 73 2c 20 | 6f 6b 20 67 6f 20 62 61 |trings, |ok go ba|
|00001d80| 63 6b 20 74 6f 20 30 30 | 34 36 34 42 41 38 20 61 |ck to 00|464BA8 a|
|00001d90| 64 64 72 65 73 73 2e 20 | 4e 6f 77 20 79 6f 75 27 |ddress. |Now you'|
|00001da0| 6c 6c 20 66 69 6e 64 20 | 61 0d 0a 20 20 20 20 20 |ll find |a.. |
|00001db0| 20 20 20 20 63 6f 6d 70 | 61 72 69 73 6f 6e 2c 20 | comp|arison, |
|00001dc0| 6c 6f 6f 6b 20 61 74 20 | 34 36 34 42 42 32 2c 20 |look at |464BB2, |
|00001dd0| 69 74 27 73 20 77 68 65 | 72 65 20 69 74 20 77 69 |it's whe|re it wi|
|00001de0| 6c 6c 20 6a 75 6d 70 20 | 74 6f 20 77 68 65 6e 20 |ll jump |to when |
|00001df0| 69 74 20 68 61 73 0d 0a | 20 20 20 20 20 20 20 20 |it has..| |
|00001e00| 20 65 78 70 69 72 65 64 | 2e 20 4c 65 74 27 73 20 | expired|. Let's |
|00001e10| 74 72 79 2e 0d 0a 20 20 | 20 20 20 20 20 20 20 4d |try... | M|
|00001e20| 61 6b 65 20 73 75 72 65 | 20 74 68 65 20 67 72 65 |ake sure| the gre|
|00001e30| 65 6e 20 63 6f 6c 6f 72 | 20 62 61 72 20 69 73 20 |en color| bar is |
|00001e40| 6f 6e 20 30 30 34 36 34 | 42 42 32 20 37 34 31 43 |on 00464|BB2 741C|
|00001e50| 20 20 20 20 20 20 20 20 | 20 6a 65 20 30 30 34 36 | | je 0046|
|00001e60| 34 42 44 30 20 0d 0a 20 | 20 20 20 20 20 20 20 20 |4BD0 .. | |
|00001e70| 61 6e 64 20 79 6f 75 20 | 73 68 6f 75 6c 64 20 73 |and you |should s|
|00001e80| 65 65 20 4f 66 66 73 65 | 74 20 61 64 64 72 65 73 |ee Offse|t addres|
|00001e90| 73 20 62 65 6c 6f 77 20 | 6f 6e 20 74 68 65 20 73 |s below |on the s|
|00001ea0| 63 72 65 65 6e 20 6c 69 | 6b 65 20 40 4f 66 66 73 |creen li|ke @Offs|
|00001eb0| 65 74 0d 0a 20 20 20 20 | 20 20 20 20 20 30 30 30 |et.. | 000|
|00001ec0| 36 33 46 42 32 68 2e 20 | 49 74 27 73 20 77 68 65 |63FB2h. |It's whe|
|00001ed0| 72 65 20 79 6f 75 20 63 | 61 6e 20 70 61 74 63 68 |re you c|an patch|
|00001ee0| 20 69 74 20 69 6e 20 53 | 79 73 74 65 6d 43 6c 65 | it in S|ystemCle|
|00001ef0| 61 6e 65 72 2e 45 58 45 | 2e 0d 0a 0d 0a 53 74 65 |aner.EXE|.....Ste|
|00001f00| 70 20 31 31 2e 20 47 6f | 20 62 61 63 6b 20 74 6f |p 11. Go| back to|
|00001f10| 20 57 43 2c 20 72 75 6e | 20 48 49 45 57 20 53 59 | WC, run| HIEW SY|
|00001f20| 53 54 45 4d 7e 31 2e 45 | 58 45 2c 20 70 72 65 73 |STEM~1.E|XE, pres|
|00001f30| 73 20 46 34 20 74 6f 20 | 73 65 6c 65 63 74 20 44 |s F4 to |select D|
|00001f40| 65 63 6f 64 65 20 6d 6f | 64 65 0d 0a 20 20 20 20 |ecode mo|de.. |
|00001f50| 20 20 20 20 20 28 41 53 | 4d 29 2c 20 70 72 65 73 | (AS|M), pres|
|00001f60| 73 20 46 35 20 61 6e 64 | 20 65 6e 74 65 72 20 36 |s F5 and| enter 6|
|00001f70| 33 46 42 32 2e 20 59 6f | 75 20 73 68 6f 75 6c 64 |3FB2. Yo|u should|
|00001f80| 20 73 65 65 20 6c 69 6b | 65 3a 0d 0a 0d 0a 20 20 | see lik|e:.... |
|00001f90| 2e 30 30 30 36 34 42 42 | 32 3a 20 37 34 31 43 20 |.00064BB|2: 741C |
|00001fa0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00001fb0| 20 20 20 20 20 20 20 20 | 6a 65 20 20 20 20 2e 30 | |je .0|
|00001fc0| 30 30 30 36 34 42 44 30 | 20 20 20 2d 2d 2d 2d 2d |00064BD0| -----|
|00001fd0| 2d 2d 2d 2d 2d 20 28 31 | 29 0d 0a 20 20 2e 30 30 |----- (1|).. .00|
|00001fe0| 30 36 34 42 42 34 3a 20 | 36 41 30 30 20 20 20 20 |064BB4: |6A00 |
|00001ff0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002000| 20 20 20 20 20 70 75 73 | 68 20 20 20 30 30 30 0d | pus|h 000.|
|00002010| 0a 20 20 2e 30 30 30 36 | 34 42 42 36 3a 20 36 36 |. .0006|4BB6: 66|
|00002020| 38 42 30 44 45 34 34 42 | 34 36 30 30 20 20 20 20 |8B0DE44B|4600 |
|00002030| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 20 | | mov |
|00002040| 20 20 63 78 2c 5b 30 30 | 30 34 36 34 42 45 34 5d | cx,[00|0464BE4]|
|00002050| 0d 0a 0d 0a 53 74 65 70 | 20 31 32 2e 20 54 68 61 |....Step| 12. Tha|
|00002060| 74 27 73 20 77 68 65 72 | 65 20 79 6f 75 20 63 61 |t's wher|e you ca|
|00002070| 6e 20 63 68 61 6e 67 65 | 20 74 68 65 20 62 79 74 |n change| the byt|
|00002080| 65 73 2c 20 70 72 65 73 | 73 20 46 33 2c 20 65 6e |es, pres|s F3, en|
|00002090| 74 65 72 20 45 42 2c 20 | 70 72 65 73 73 20 46 39 |ter EB, |press F9|
|000020a0| 0d 0a 20 20 20 20 20 20 | 20 20 20 74 6f 20 75 70 |.. | to up|
|000020b0| 64 61 74 65 20 53 59 53 | 54 45 4d 7e 31 2e 45 58 |date SYS|TEM~1.EX|
|000020c0| 45 2e 20 45 78 69 74 20 | 48 49 45 57 2e 0d 0a 0d |E. Exit |HIEW....|
|000020d0| 0a 53 74 65 70 20 31 33 | 2e 20 52 75 6e 20 53 79 |.Step 13|. Run Sy|
|000020e0| 73 74 65 6d 43 6c 65 61 | 6e 65 72 2e 45 58 45 2c |stemClea|ner.EXE,|
|000020f0| 20 64 6f 65 73 20 69 74 | 20 65 78 70 69 72 65 3f | does it| expire?|
|00002100| 20 56 6f 69 6c 61 21 20 | 59 6f 75 27 76 65 20 6d | Voila! |You've m|
|00002110| 61 64 65 20 69 74 21 21 | 0d 0a 0d 0a 0d 0a 50 41 |ade it!!|......PA|
|00002120| 52 54 20 31 62 3a 20 54 | 6f 20 62 79 70 61 73 73 |RT 1b: T|o bypass|
|00002130| 20 4e 41 47 20 61 62 6f | 75 74 20 49 6e 76 61 6c | NAG abo|ut Inval|
|00002140| 69 64 20 44 61 74 65 20 | 69 6e 20 53 79 73 74 65 |id Date |in Syste|
|00002150| 6d 20 43 6c 65 61 6e 65 | 72 20 31 2e 32 31 20 28 |m Cleane|r 1.21 (|
|00002160| 77 69 74 68 20 57 33 32 | 44 61 73 6d 29 0d 0a 0d |with W32|Dasm)...|
|00002170| 0a 28 54 68 69 73 20 69 | 73 20 75 73 65 64 20 6f |.(This i|s used o|
|00002180| 6e 6c 79 20 69 66 20 79 | 6f 75 20 63 68 61 6e 67 |nly if y|ou chang|
|00002190| 65 64 20 44 61 74 65 20 | 74 6f 20 31 32 2f 32 35 |ed Date |to 12/25|
|000021a0| 2f 39 38 20 66 6f 72 20 | 65 78 61 6d 70 6c 65 20 |/98 for |example |
|000021b0| 61 6e 64 20 63 68 61 6e | 67 65 64 20 62 61 63 6b |and chan|ged back|
|000021c0| 0d 0a 74 6f 20 31 32 2f | 32 35 2f 39 37 2c 20 61 |..to 12/|25/97, a|
|000021d0| 6e 64 20 79 6f 75 27 6c | 6c 20 73 65 65 20 61 20 |nd you'l|l see a |
|000021e0| 4e 41 47 20 77 68 69 63 | 68 20 69 74 20 73 61 79 |NAG whic|h it say|
|000021f0| 73 20 22 54 68 65 20 73 | 79 73 74 65 6d 20 63 6c |s "The s|ystem cl|
|00002200| 6f 63 6b 20 68 61 73 20 | 62 65 65 6e 0d 0a 6d 6f |ock has |been..mo|
|00002210| 76 65 64 20 62 61 63 6b | 2e 20 50 6c 65 61 73 65 |ved back|. Please|
|00002220| 20 72 65 73 65 74 20 73 | 79 73 74 65 6d 20 63 6c | reset s|ystem cl|
|00002230| 6f 63 6b 20 74 6f 20 63 | 6f 72 72 65 63 74 20 62 |ock to c|orrect b|
|00002240| 6c 61 68 20 62 6c 61 68 | 22 29 0d 0a 0d 0a 53 74 |lah blah|")....St|
|00002250| 65 70 20 31 2e 20 52 75 | 6e 20 53 79 73 74 65 6d |ep 1. Ru|n System|
|00002260| 43 6c 65 61 6e 65 72 2e | 45 58 45 0d 0a 0d 0a 53 |Cleaner.|EXE....S|
|00002270| 74 65 70 20 32 2e 20 59 | 6f 75 27 6c 6c 20 73 65 |tep 2. Y|ou'll se|
|00002280| 65 20 74 68 65 20 65 72 | 72 6f 72 20 6d 65 73 73 |e the er|ror mess|
|00002290| 61 67 65 20 77 68 69 63 | 68 20 69 74 20 73 61 79 |age whic|h it say|
|000022a0| 73 20 74 68 61 74 20 79 | 6f 75 72 20 64 61 74 65 |s that y|our date|
|000022b0| 20 69 73 20 66 75 63 6b | 65 64 20 75 70 2c 0d 0a | is fuck|ed up,..|
|000022c0| 20 20 20 20 20 20 20 20 | 61 6e 64 20 79 6f 75 20 | |and you |
|000022d0| 73 68 6f 75 6c 64 20 77 | 72 69 74 65 20 64 6f 77 |should w|rite dow|
|000022e0| 6e 20 74 68 69 73 20 6d | 65 73 73 61 67 65 29 20 |n this m|essage) |
|000022f0| 61 6e 64 20 65 78 69 74 | 20 74 68 65 20 70 72 6f |and exit| the pro|
|00002300| 67 72 61 6d 2e 0d 0a 0d | 0a 53 74 65 70 20 33 2e |gram....|.Step 3.|
|00002310| 20 4f 6b 2c 20 65 78 69 | 74 20 74 68 65 20 70 72 | Ok, exi|t the pr|
|00002320| 6f 67 72 61 6d 2e 0d 0a | 0d 0a 53 74 65 70 20 34 |ogram...|..Step 4|
|00002330| 2e 20 52 75 6e 20 57 43 | 2c 20 67 6f 20 74 6f 20 |. Run WC|, go to |
|00002340| 53 79 73 74 65 6d 20 43 | 6c 65 61 6e 65 72 20 64 |System C|leaner d|
|00002350| 69 72 65 63 74 6f 72 79 | 2e 0d 0a 0d 0a 53 74 65 |irectory|.....Ste|
|00002360| 70 20 35 2e 20 43 6f 70 | 79 20 53 79 73 74 65 6d |p 5. Cop|y System|
|00002370| 43 6c 65 61 6e 65 72 2e | 45 58 45 20 74 6f 20 53 |Cleaner.|EXE to S|
|00002380| 79 73 74 65 6d 43 6c 65 | 61 6e 65 72 2e 45 58 58 |ystemCle|aner.EXX|
|00002390| 20 28 66 6f 72 20 62 61 | 63 6b 75 70 29 20 61 6e | (for ba|ckup) an|
|000023a0| 64 20 63 6f 70 79 0d 0a | 20 20 20 20 20 20 20 20 |d copy..| |
|000023b0| 53 79 73 74 65 6d 43 6c | 65 61 6e 65 72 2e 45 58 |SystemCl|eaner.EX|
|000023c0| 45 20 74 6f 20 53 79 73 | 74 65 6d 43 6c 65 61 6e |E to Sys|temClean|
|000023d0| 65 72 2e 57 33 32 20 28 | 66 6f 72 20 75 73 65 20 |er.W32 (|for use |
|000023e0| 62 79 20 57 33 32 44 61 | 73 6d 29 0d 0a 0d 0a 53 |by W32Da|sm)....S|
|000023f0| 74 65 70 20 36 2e 20 52 | 75 6e 20 57 33 32 44 61 |tep 6. R|un W32Da|
|00002400| 73 6d 20 61 6e 64 20 64 | 69 73 61 73 73 65 6d 62 |sm and d|isassemb|
|00002410| 6c 65 20 53 79 73 74 65 | 6d 43 6c 65 61 6e 65 72 |le Syste|mCleaner|
|00002420| 2e 57 33 32 0d 0a 0d 0a | 53 74 65 70 20 37 2e 20 |.W32....|Step 7. |
|00002430| 4f 6e 63 65 20 69 74 27 | 73 20 64 69 73 61 73 73 |Once it'|s disass|
|00002440| 65 6d 62 6c 65 64 2c 20 | 63 6c 69 63 6b 20 53 54 |embled, |click ST|
|00002450| 52 49 4e 47 20 44 41 54 | 41 20 52 45 46 45 52 45 |RING DAT|A REFERE|
|00002460| 4e 43 45 2c 20 6c 6f 6f | 6b 20 64 6f 77 6e 20 66 |NCE, loo|k down f|
|00002470| 6f 72 20 74 68 65 0d 0a | 20 20 20 20 20 20 20 20 |or the..| |
|00002480| 73 74 72 69 6e 67 20 22 | 54 68 65 20 73 79 73 74 |string "|The syst|
|00002490| 65 6d 20 63 6c 6f 63 6b | 20 68 61 73 20 62 65 65 |em clock| has bee|
|000024a0| 6e 20 6d 6f 76 65 64 20 | 62 61 63 6b 22 2e 0d 0a |n moved |back"...|
|000024b0| 20 20 20 20 20 20 20 20 | 28 59 6f 75 20 73 68 6f | |(You sho|
|000024c0| 75 6c 64 20 72 65 6d 65 | 6d 62 65 72 20 74 68 61 |uld reme|mber tha|
|000024d0| 74 20 65 72 72 6f 72 20 | 6d 65 73 73 61 67 65 29 |t error |message)|
|000024e0| 2c 20 64 6f 75 62 6c 65 | 20 63 6c 69 63 6b 20 6f |, double| click o|
|000024f0| 6e 20 69 74 2e 0d 0a 0d | 0a 53 74 65 70 20 38 2e |n it....|.Step 8.|
|00002500| 20 43 6c 6f 73 65 20 53 | 44 52 20 77 69 6e 64 6f | Close S|DR windo|
|00002510| 77 2c 20 79 6f 75 20 73 | 68 6f 75 6c 64 20 73 65 |w, you s|hould se|
|00002520| 65 20 74 68 65 20 6c 69 | 6e 65 3a 0d 0a 0d 0a 20 |e the li|ne:.... |
|00002530| 20 3a 30 30 34 36 34 45 | 35 36 20 36 36 38 42 30 | :00464E|56 668B0|
|00002540| 44 38 38 34 45 34 36 30 | 30 20 20 20 20 20 20 20 |D884E460|0 |
|00002550| 20 20 20 6d 6f 76 20 63 | 78 2c 20 77 6f 72 64 20 | mov c|x, word |
|00002560| 70 74 72 20 5b 30 30 34 | 36 34 45 38 38 5d 0d 0a |ptr [004|64E88]..|
|00002570| 20 20 3a 30 30 34 36 34 | 45 35 44 20 42 32 30 31 | :00464|E5D B201|
|00002580| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002590| 20 20 20 20 6d 6f 76 20 | 64 6c 2c 20 30 31 0d 0a | mov |dl, 01..|
|000025a0| 0d 0a 20 20 2a 20 50 6f | 73 73 69 62 6c 65 20 53 |.. * Po|ssible S|
|000025b0| 74 72 69 6e 67 44 61 74 | 61 20 52 65 66 20 66 72 |tringDat|a Ref fr|
|000025c0| 6f 6d 20 43 6f 64 65 20 | 4f 62 6a 20 2d 3e 22 54 |om Code |Obj ->"T|
|000025d0| 68 65 20 73 79 73 74 65 | 6d 20 63 6c 6f 63 6b 20 |he syste|m clock |
|000025e0| 68 61 73 20 62 65 65 6e | 20 6d 6f 76 65 64 20 22 |has been| moved "|
|000025f0| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |.. | |
|00002600| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002610| 20 20 20 20 20 20 20 20 | 20 20 20 20 2d 3e 22 62 | | ->"b|
|00002620| 61 63 6b 2e 20 50 6c 65 | 61 73 65 20 72 65 73 65 |ack. Ple|ase rese|
|00002630| 74 20 73 79 73 74 65 6d | 20 63 6c 6f 63 6b 20 22 |t system| clock "|
|00002640| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |.. | |
|00002650| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002660| 20 20 20 20 20 20 20 20 | 20 20 20 20 2d 3e 22 74 | | ->"t|
|00002670| 6f 20 63 6f 72 72 65 63 | 74 20 74 69 6d 65 20 62 |o correc|t time b|
|00002680| 65 66 6f 72 65 20 72 65 | 2d 72 75 6e 6e 69 6e 67 |efore re|-running|
|00002690| 20 22 0d 0a 0d 0a 53 74 | 65 70 20 39 2e 20 4f 6b | "....St|ep 9. Ok|
|000026a0| 2c 20 70 72 65 73 73 20 | 55 50 20 61 72 72 6f 77 |, press |UP arrow|
|000026b0| 20 6b 65 79 20 74 69 6c | 6c 20 79 6f 75 20 73 65 | key til|l you se|
|000026c0| 65 3a 0d 0a 0d 0a 20 20 | 3a 30 30 34 36 34 45 34 |e:.... |:00464E4|
|000026d0| 38 20 35 33 20 20 20 20 | 20 20 20 20 20 20 20 20 |8 53 | |
|000026e0| 20 20 20 20 20 20 20 20 | 20 20 70 75 73 68 20 65 | | push e|
|000026f0| 62 78 0d 0a 20 20 3a 30 | 30 34 36 34 45 34 39 20 |bx.. :0|0464E49 |
|00002700| 38 42 44 38 20 20 20 20 | 20 20 20 20 20 20 20 20 |8BD8 | |
|00002710| 20 20 20 20 20 20 20 20 | 6d 6f 76 20 65 62 78 2c | |mov ebx,|
|00002720| 20 65 61 78 0d 0a 20 20 | 3a 30 30 34 36 34 45 34 | eax.. |:00464E4|
|00002730| 42 20 38 30 42 42 30 43 | 30 31 30 30 30 30 30 30 |B 80BB0C|01000000|
|00002740| 20 20 20 20 20 20 20 20 | 20 20 63 6d 70 20 62 79 | | cmp by|
|00002750| 74 65 20 70 74 72 20 5b | 65 62 78 2b 30 30 30 30 |te ptr [|ebx+0000|
|00002760| 30 31 30 43 5d 2c 20 30 | 30 0d 0a 20 20 3a 30 30 |010C], 0|0.. :00|
|00002770| 34 36 34 45 35 32 20 37 | 34 32 31 20 20 20 20 20 |464E52 7|421 |
|00002780| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 6a | | j|
|00002790| 65 20 30 30 34 36 34 45 | 37 35 0d 0a 20 20 3a 30 |e 00464E|75.. :0|
|000027a0| 30 34 36 34 45 35 34 20 | 36 41 30 30 20 20 20 20 |0464E54 |6A00 |
|000027b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000027c0| 70 75 73 68 20 30 30 30 | 30 30 30 30 30 0d 0a 20 |push 000|00000.. |
|000027d0| 20 3a 30 30 34 36 34 45 | 35 36 20 36 36 38 42 30 | :00464E|56 668B0|
|000027e0| 44 38 38 34 45 34 36 30 | 30 20 20 20 20 20 20 20 |D884E460|0 |
|000027f0| 20 20 20 6d 6f 76 20 63 | 78 2c 20 77 6f 72 64 20 | mov c|x, word |
|00002800| 70 74 72 20 5b 30 30 34 | 36 34 45 38 38 5d 0d 0a |ptr [004|64E88]..|
|00002810| 0d 0a 53 74 65 70 20 31 | 30 2e 20 4c 6f 6f 6b 20 |..Step 1|0. Look |
|00002820| 61 74 20 30 30 34 36 34 | 45 35 32 2c 20 69 74 27 |at 00464|E52, it'|
|00002830| 73 20 77 68 65 72 65 20 | 69 74 20 77 69 6c 6c 20 |s where |it will |
|00002840| 6a 75 6d 70 20 74 6f 20 | 77 68 65 6e 20 69 74 20 |jump to |when it |
|00002850| 68 61 73 20 66 75 63 6b | 65 64 2e 20 4c 65 74 27 |has fuck|ed. Let'|
|00002860| 73 0d 0a 20 20 20 20 20 | 20 20 20 20 73 65 65 2e |s.. | see.|
|00002870| 20 4d 61 6b 65 20 73 75 | 72 65 20 74 68 65 20 67 | Make su|re the g|
|00002880| 72 65 65 6e 20 63 6f 6c | 6f 72 20 62 61 72 20 69 |reen col|or bar i|
|00002890| 73 20 6f 6e 20 30 30 34 | 36 34 45 35 32 20 37 34 |s on 004|64E52 74|
|000028a0| 32 31 20 20 20 6a 65 20 | 30 30 34 36 34 45 37 35 |21 je |00464E75|
|000028b0| 0d 0a 20 20 20 20 20 20 | 20 20 20 61 6e 64 20 79 |.. | and y|
|000028c0| 6f 75 20 73 68 6f 75 6c | 64 20 73 65 65 20 4f 66 |ou shoul|d see Of|
|000028d0| 66 73 65 74 20 61 64 64 | 72 65 73 73 20 62 65 6c |fset add|ress bel|
|000028e0| 6f 77 20 6f 6e 20 74 68 | 65 20 73 63 72 65 65 6e |ow on th|e screen|
|000028f0| 20 6c 69 6b 65 20 40 4f | 66 66 73 65 74 0d 0a 20 | like @O|ffset.. |
|00002900| 20 20 20 20 20 20 20 20 | 30 30 30 36 34 32 35 32 | |00064252|
|00002910| 68 2e 20 49 74 27 73 20 | 77 68 65 72 65 20 79 6f |h. It's |where yo|
|00002920| 75 20 63 61 6e 20 70 61 | 74 63 68 20 69 74 20 69 |u can pa|tch it i|
|00002930| 6e 20 53 79 73 74 65 6d | 43 6c 65 61 6e 65 72 2e |n System|Cleaner.|
|00002940| 45 58 45 2e 0d 0a 0d 0a | 53 74 65 70 20 31 31 2e |EXE.....|Step 11.|
|00002950| 20 47 6f 20 62 61 63 6b | 20 74 6f 20 57 43 2c 20 | Go back| to WC, |
|00002960| 72 75 6e 20 48 49 45 57 | 20 53 59 53 54 45 4d 7e |run HIEW| SYSTEM~|
|00002970| 31 2e 45 58 45 2c 20 70 | 72 65 73 73 20 46 34 20 |1.EXE, p|ress F4 |
|00002980| 74 6f 20 73 65 6c 65 63 | 74 20 44 65 63 6f 64 65 |to selec|t Decode|
|00002990| 20 6d 6f 64 65 0d 0a 20 | 20 20 20 20 20 20 20 20 | mode.. | |
|000029a0| 28 41 53 4d 29 2c 20 70 | 72 65 73 73 20 46 35 20 |(ASM), p|ress F5 |
|000029b0| 61 6e 64 20 65 6e 74 65 | 72 20 36 34 32 35 32 2e |and ente|r 64252.|
|000029c0| 20 59 6f 75 20 73 68 6f | 75 6c 64 20 73 65 65 20 | You sho|uld see |
|000029d0| 6c 69 6b 65 3a 0d 0a 0d | 0a 20 20 2e 30 30 30 36 |like:...|. .0006|
|000029e0| 34 45 35 32 3a 20 37 34 | 32 31 20 20 20 20 20 20 |4E52: 74|21 |
|000029f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002a00| 20 20 20 6a 6d 70 73 20 | 20 2e 30 30 30 30 36 34 | jmps | .000064|
|00002a10| 45 37 35 20 20 20 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |E75 --|--------|
|00002a20| 20 28 31 29 0d 0a 20 20 | 2e 30 30 30 36 34 45 35 | (1).. |.00064E5|
|00002a30| 34 3a 20 36 41 30 30 20 | 20 20 20 20 20 20 20 20 |4: 6A00 | |
|00002a40| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002a50| 70 75 73 68 20 20 20 30 | 30 30 0d 0a 20 20 2e 30 |push 0|00.. .0|
|00002a60| 30 30 36 34 45 35 36 3a | 20 36 36 38 42 30 44 38 |0064E56:| 668B0D8|
|00002a70| 38 34 45 34 36 30 30 20 | 20 20 20 20 20 20 20 20 |84E4600 | |
|00002a80| 20 20 20 20 20 20 6d 6f | 76 20 20 20 20 63 78 2c | mo|v cx,|
|00002a90| 5b 30 30 30 34 36 34 45 | 38 38 5d 0d 0a 0d 0a 53 |[000464E|88]....S|
|00002aa0| 74 65 70 20 31 32 2e 20 | 54 68 61 74 27 73 20 77 |tep 12. |That's w|
|00002ab0| 68 65 72 65 20 79 6f 75 | 20 63 61 6e 20 63 68 61 |here you| can cha|
|00002ac0| 6e 67 65 20 74 68 65 20 | 62 79 74 65 73 2c 20 70 |nge the |bytes, p|
|00002ad0| 72 65 73 73 20 46 33 2c | 20 65 6e 74 65 72 20 45 |ress F3,| enter E|
|00002ae0| 42 2c 20 70 72 65 73 73 | 20 46 39 0d 0a 20 20 20 |B, press| F9.. |
|00002af0| 20 20 20 20 20 20 74 6f | 20 75 70 64 61 74 65 20 | to| update |
|00002b00| 53 59 53 54 45 4d 7e 31 | 2e 45 58 45 2e 20 45 78 |SYSTEM~1|.EXE. Ex|
|00002b10| 69 74 20 48 49 45 57 2e | 0d 0a 0d 0a 53 74 65 70 |it HIEW.|....Step|
|00002b20| 20 31 33 2e 20 52 75 6e | 20 53 79 73 74 65 6d 43 | 13. Run| SystemC|
|00002b30| 6c 65 61 6e 65 72 2e 45 | 58 45 2c 20 64 6f 65 73 |leaner.E|XE, does|
|00002b40| 20 69 74 20 63 6f 6d 70 | 6c 61 69 6e 3f 20 56 6f | it comp|lain? Vo|
|00002b50| 69 6c 61 21 20 59 6f 75 | 27 76 65 20 6d 61 64 65 |ila! You|'ve made|
|00002b60| 20 69 74 21 21 0d 0a 0d | 0a 0d 0a 50 41 52 54 20 | it!!...|...PART |
|00002b70| 32 3a 20 54 6f 20 65 6e | 61 62 6c 65 20 63 72 69 |2: To en|able cri|
|00002b80| 70 70 6c 65 64 20 66 65 | 61 74 75 72 65 73 20 69 |ppled fe|atures i|
|00002b90| 6e 20 4d 61 63 72 6f 20 | 53 63 68 65 64 75 6c 61 |n Macro |Schedula|
|00002ba0| 72 20 34 2e 33 2e 31 31 | 20 28 77 69 74 68 20 57 |r 4.3.11| (with W|
|00002bb0| 33 32 44 61 73 6d 29 0d | 0a 0d 0a 53 74 65 70 20 |32Dasm).|...Step |
|00002bc0| 31 2e 20 52 75 6e 20 4d | 53 43 48 45 44 2e 45 58 |1. Run M|SCHED.EX|
|00002bd0| 45 0d 0a 0d 0a 53 74 65 | 70 20 32 2e 20 54 72 79 |E....Ste|p 2. Try|
|00002be0| 20 74 6f 20 61 64 64 20 | 6d 6f 72 65 20 6d 61 63 | to add |more mac|
|00002bf0| 72 6f 73 20 61 6e 64 20 | 69 74 27 6c 6c 20 73 61 |ros and |it'll sa|
|00002c00| 79 20 74 68 61 74 20 69 | 74 20 68 61 73 20 6c 69 |y that i|t has li|
|00002c10| 6d 69 74 65 64 20 74 6f | 20 32 20 6d 61 63 72 6f |mited to| 2 macro|
|00002c20| 73 2e 0d 0a 20 20 20 20 | 20 20 20 20 57 72 69 74 |s... | Writ|
|00002c30| 65 20 64 6f 77 6e 20 74 | 68 69 73 20 6d 65 73 73 |e down t|his mess|
|00002c40| 61 67 65 20 61 6e 64 20 | 65 78 69 74 20 74 68 65 |age and |exit the|
|00002c50| 20 70 72 6f 67 72 61 6d | 2e 0d 0a 0d 0a 53 74 65 | program|.....Ste|
|00002c60| 70 20 33 2e 20 52 75 6e | 20 57 43 2c 20 67 6f 20 |p 3. Run| WC, go |
|00002c70| 74 6f 20 4d 53 43 48 45 | 44 20 64 69 72 65 63 74 |to MSCHE|D direct|
|00002c80| 6f 72 79 2e 0d 0a 0d 0a | 53 74 65 70 20 34 2e 20 |ory.....|Step 4. |
|00002c90| 43 6f 70 79 20 4d 53 43 | 48 45 44 2e 45 58 45 20 |Copy MSC|HED.EXE |
|00002ca0| 74 6f 20 4d 53 43 48 45 | 44 2e 45 58 58 20 28 66 |to MSCHE|D.EXX (f|
|00002cb0| 6f 72 20 62 61 63 6b 75 | 70 29 20 61 6e 64 20 63 |or backu|p) and c|
|00002cc0| 6f 70 79 20 4d 53 43 48 | 45 44 2e 45 58 45 20 74 |opy MSCH|ED.EXE t|
|00002cd0| 6f 0d 0a 20 20 20 20 20 | 20 20 20 4d 53 43 48 45 |o.. | MSCHE|
|00002ce0| 44 2e 57 33 32 20 28 66 | 6f 72 20 75 73 65 20 62 |D.W32 (f|or use b|
|00002cf0| 79 20 57 33 32 44 61 73 | 6d 29 0d 0a 0d 0a 53 74 |y W32Das|m)....St|
|00002d00| 65 70 20 35 2e 20 52 75 | 6e 20 57 33 32 44 61 73 |ep 5. Ru|n W32Das|
|00002d10| 6d 20 61 6e 64 20 64 69 | 73 61 73 73 65 6d 62 6c |m and di|sassembl|
|00002d20| 65 20 4d 53 43 48 45 44 | 2e 57 33 32 2e 0d 0a 0d |e MSCHED|.W32....|
|00002d30| 0a 53 74 65 70 20 36 2e | 20 4f 6e 63 65 20 69 74 |.Step 6.| Once it|
|00002d40| 27 73 20 64 69 73 61 73 | 73 65 6d 62 6c 65 64 2c |'s disas|sembled,|
|00002d50| 20 63 6c 69 63 6b 20 53 | 54 52 49 4e 47 20 44 41 | click S|TRING DA|
|00002d60| 54 41 20 52 45 46 45 52 | 45 4e 43 45 2c 20 6c 6f |TA REFER|ENCE, lo|
|00002d70| 6f 6b 20 64 6f 77 6e 20 | 66 6f 72 20 74 68 65 0d |ok down |for the.|
|00002d80| 0a 20 20 20 20 20 20 20 | 20 73 74 72 69 6e 67 20 |. | string |
|00002d90| 22 55 6e 72 65 67 69 73 | 74 65 72 65 64 20 63 6f |"Unregis|tered co|
|00002da0| 70 69 65 73 20 6f 66 20 | 4d 53 20 61 72 65 20 6c |pies of |MS are l|
|00002db0| 69 6d 69 74 65 64 20 74 | 6f 2e 2e 22 2e 0d 0a 20 |imited t|o.."... |
|00002dc0| 20 20 20 20 20 20 20 28 | 59 6f 75 20 73 68 6f 75 | (|You shou|
|00002dd0| 6c 64 20 72 65 6d 65 6d | 62 65 72 20 74 68 61 74 |ld remem|ber that|
|00002de0| 20 65 72 72 6f 72 20 6d | 65 73 73 61 67 65 29 2c | error m|essage),|
|00002df0| 20 64 6f 75 62 6c 65 20 | 63 6c 69 63 6b 20 6f 6e | double |click on|
|00002e00| 20 69 74 2e 0d 0a 0d 0a | 53 74 65 70 20 37 2e 20 | it.....|Step 7. |
|00002e10| 43 6c 6f 73 65 20 53 44 | 52 20 77 69 6e 64 6f 77 |Close SD|R window|
|00002e20| 2c 20 79 6f 75 20 73 68 | 6f 75 6c 64 20 73 65 65 |, you sh|ould see|
|00002e30| 20 74 68 65 20 6c 69 6e | 65 3a 0d 0a 0d 0a 20 20 | the lin|e:.... |
|00002e40| 2a 20 50 6f 73 73 69 62 | 6c 65 20 53 74 72 69 6e |* Possib|le Strin|
|00002e50| 67 44 61 74 61 20 52 65 | 66 20 66 72 6f 6d 20 43 |gData Re|f from C|
|00002e60| 6f 64 65 20 4f 62 6a 20 | 2d 3e 22 55 6e 72 65 67 |ode Obj |->"Unreg|
|00002e70| 69 73 74 65 72 65 64 20 | 63 6f 70 69 65 73 20 6f |istered |copies o|
|00002e80| 66 20 4d 61 63 72 6f 2e | 2e 22 0d 0a 20 20 20 20 |f Macro.|.".. |
|00002e90| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002ea0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002eb0| 20 20 20 20 20 20 2d 3e | 22 68 61 76 65 20 61 20 | ->|"have a |
|00002ec0| 6c 69 6d 69 74 20 6f 66 | 20 32 30 20 6c 69 6e 65 |limit of| 20 line|
|00002ed0| 73 20 70 65 72 2e 2e 22 | 0d 0a 0d 0a 20 20 3a 30 |s per.."|.... :0|
|00002ee0| 30 34 34 38 41 45 44 20 | 42 38 36 30 39 35 34 34 |0448AED |B8609544|
|00002ef0| 30 30 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |00 | |
|00002f00| 6d 6f 76 20 65 61 78 2c | 20 30 30 34 34 39 35 36 |mov eax,| 0044956|
|00002f10| 30 0d 0a 0d 0a 53 74 65 | 70 20 38 2e 20 4f 6b 2c |0....Ste|p 8. Ok,|
|00002f20| 20 70 72 65 73 73 20 55 | 50 20 61 72 72 6f 77 20 | press U|P arrow |
|00002f30| 6b 65 79 20 74 69 6c 6c | 20 79 6f 75 20 73 65 65 |key till| you see|
|00002f40| 3a 0d 0a 0d 0a 20 20 3a | 30 30 34 34 38 41 43 41 |:.... :|00448ACA|
|00002f50| 20 37 35 33 30 20 20 20 | 20 20 20 20 20 20 20 20 | 7530 | |
|00002f60| 20 20 20 20 20 20 20 20 | 20 6a 6e 65 20 30 30 34 | | jne 004|
|00002f70| 34 38 41 46 43 0d 0a 20 | 20 3a 30 30 34 34 38 41 |48AFC.. | :00448A|
|00002f80| 43 43 20 38 42 38 33 37 | 30 30 32 30 30 30 30 20 |CC 8B837|0020000 |
|00002f90| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 65 | | mov e|
|00002fa0| 61 78 2c 20 64 77 6f 72 | 64 20 70 74 72 20 5b 65 |ax, dwor|d ptr [e|
|00002fb0| 62 78 2b 30 30 30 30 30 | 32 37 30 5d 0d 0a 20 20 |bx+00000|270].. |
|00002fc0| 3a 30 30 34 34 38 41 44 | 32 20 38 42 38 30 46 43 |:00448AD|2 8B80FC|
|00002fd0| 30 30 30 30 30 30 20 20 | 20 20 20 20 20 20 20 20 |000000 | |
|00002fe0| 20 20 6d 6f 76 20 65 61 | 78 2c 20 64 77 6f 72 64 | mov ea|x, dword|
|00002ff0| 20 70 74 72 20 5b 65 61 | 78 2b 30 30 30 30 30 30 | ptr [ea|x+000000|
|00003000| 46 43 5d 0d 0a 20 20 3a | 30 30 34 34 38 41 44 38 |FC].. :|00448AD8|
|00003010| 20 38 42 31 30 20 20 20 | 20 20 20 20 20 20 20 20 | 8B10 | |
|00003020| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 65 64 78 | | mov edx|
|00003030| 2c 20 64 77 6f 72 64 20 | 70 74 72 20 5b 65 61 78 |, dword |ptr [eax|
|00003040| 5d 0d 0a 20 20 3a 30 30 | 34 34 38 41 44 41 20 46 |].. :00|448ADA F|
|00003050| 46 35 32 31 30 20 20 20 | 20 20 20 20 20 20 20 20 |F5210 | |
|00003060| 20 20 20 20 20 20 20 63 | 61 6c 6c 20 5b 65 64 78 | c|all [edx|
|00003070| 2b 31 30 5d 0d 0a 20 20 | 3a 30 30 34 34 38 41 44 |+10].. |:00448AD|
|00003080| 44 20 38 33 46 38 31 33 | 20 20 20 20 20 20 20 20 |D 83F813| |
|00003090| 20 20 20 20 20 20 20 20 | 20 20 63 6d 70 20 65 61 | | cmp ea|
|000030a0| 78 2c 20 30 30 30 30 30 | 30 31 33 0d 0a 20 20 3a |x, 00000|013.. :|
|000030b0| 30 30 34 34 38 41 45 30 | 20 37 45 31 41 20 20 20 |00448AE0| 7E1A |
|000030c0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000030d0| 20 6a 6c 65 20 30 30 34 | 34 38 41 46 43 0d 0a 20 | jle 004|48AFC.. |
|000030e0| 20 3a 30 30 34 34 38 41 | 45 32 20 36 41 30 30 20 | :00448A|E2 6A00 |
|000030f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003100| 20 20 20 70 75 73 68 20 | 30 30 30 30 30 30 30 30 | push |00000000|
|00003110| 0d 0a 0d 0a 53 74 65 70 | 20 39 2e 20 4c 6f 6f 6b |....Step| 9. Look|
|00003120| 20 61 74 20 30 30 34 34 | 38 41 43 41 20 61 6e 64 | at 0044|8ACA and|
|00003130| 20 30 30 34 34 38 41 45 | 30 20 61 64 64 72 65 73 | 00448AE|0 addres|
|00003140| 73 65 73 2e 20 49 74 27 | 73 20 77 68 65 72 65 20 |ses. It'|s where |
|00003150| 69 74 20 77 69 6c 6c 20 | 6a 75 6d 70 20 74 6f 0d |it will |jump to.|
|00003160| 0a 20 20 20 20 20 20 20 | 20 77 68 65 6e 20 69 74 |. | when it|
|00003170| 20 63 6f 6d 70 6c 61 69 | 6e 73 2e 20 4c 65 74 27 | complai|ns. Let'|
|00003180| 73 20 66 69 6e 64 20 6f | 75 74 2e 0d 0a 20 20 20 |s find o|ut... |
|00003190| 20 20 20 20 20 4d 61 6b | 65 20 73 75 72 65 20 74 | Mak|e sure t|
|000031a0| 68 65 20 67 72 65 65 6e | 20 63 6f 6c 6f 72 20 62 |he green| color b|
|000031b0| 61 72 20 69 73 20 6f 6e | 20 30 30 34 34 38 41 43 |ar is on| 00448AC|
|000031c0| 41 20 37 35 33 30 20 20 | 20 20 20 20 20 20 6a 6e |A 7530 | jn|
|000031d0| 65 20 30 30 34 34 38 41 | 46 43 0d 0a 20 20 20 20 |e 00448A|FC.. |
|000031e0| 20 20 20 20 61 6e 64 20 | 79 6f 75 20 73 68 6f 75 | and |you shou|
|000031f0| 6c 64 20 73 65 65 20 4f | 66 66 73 65 74 20 61 64 |ld see O|ffset ad|
|00003200| 64 72 65 73 73 20 62 65 | 6c 6f 77 20 6f 6e 20 74 |dress be|low on t|
|00003210| 68 65 20 73 63 72 65 65 | 6e 20 6c 69 6b 65 20 40 |he scree|n like @|
|00003220| 4f 66 66 73 65 74 0d 0a | 20 20 20 20 20 20 20 20 |Offset..| |
|00003230| 30 30 30 34 37 45 43 41 | 68 2e 20 49 74 27 73 20 |00047ECA|h. It's |
|00003240| 77 68 65 72 65 20 79 6f | 75 20 63 61 6e 20 70 61 |where yo|u can pa|
|00003250| 74 63 68 20 69 74 20 69 | 6e 20 4d 53 43 48 45 44 |tch it i|n MSCHED|
|00003260| 2e 45 58 45 2e 0d 0a 0d | 0a 53 74 65 70 20 31 30 |.EXE....|.Step 10|
|00003270| 2e 20 47 6f 20 62 61 63 | 6b 20 74 6f 20 57 43 2c |. Go bac|k to WC,|
|00003280| 20 72 75 6e 20 48 49 45 | 57 20 4d 53 43 48 45 44 | run HIE|W MSCHED|
|00003290| 2e 45 58 45 2c 20 70 72 | 65 73 73 20 46 34 20 74 |.EXE, pr|ess F4 t|
|000032a0| 6f 20 73 65 6c 65 63 74 | 20 44 65 63 6f 64 65 20 |o select| Decode |
|000032b0| 6d 6f 64 65 0d 0a 20 20 | 20 20 20 20 20 20 20 28 |mode.. | (|
|000032c0| 41 53 4d 29 2c 20 70 72 | 65 73 73 20 46 35 20 61 |ASM), pr|ess F5 a|
|000032d0| 6e 64 20 65 6e 74 65 72 | 20 34 37 45 43 41 2e 20 |nd enter| 47ECA. |
|000032e0| 59 6f 75 20 73 68 6f 75 | 6c 64 20 73 65 65 20 6c |You shou|ld see l|
|000032f0| 69 6b 65 3a 0d 0a 0d 0a | 20 20 2e 30 30 30 34 38 |ike:....| .00048|
|00003300| 41 43 41 3a 20 37 35 33 | 30 20 20 20 20 20 20 20 |ACA: 753|0 |
|00003310| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003320| 20 20 6a 6e 65 20 20 20 | 2e 30 30 30 30 34 38 41 | jne |.000048A|
|00003330| 46 43 20 20 20 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 20 |FC ---|------- |
|00003340| 28 31 29 0d 0a 20 20 2e | 30 30 30 34 38 41 43 43 |(1).. .|00048ACC|
|00003350| 3a 20 38 42 38 33 37 30 | 30 32 30 30 30 30 20 20 |: 8B8370|020000 |
|00003360| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 6d | | m|
|00003370| 6f 76 20 20 20 20 65 61 | 78 2c 5b 65 62 78 5d 5b |ov ea|x,[ebx][|
|00003380| 30 30 30 30 30 30 32 37 | 30 5d 0d 0a 20 20 2e 30 |00000027|0].. .0|
|00003390| 30 30 34 38 41 44 32 3a | 20 38 42 38 30 46 43 30 |0048AD2:| 8B80FC0|
|000033a0| 30 30 30 30 30 20 20 20 | 20 20 20 20 20 20 20 20 |00000 | |
|000033b0| 20 20 20 20 20 20 6d 6f | 76 20 20 20 20 65 61 78 | mo|v eax|
|000033c0| 2c 5b 65 61 78 5d 5b 30 | 30 30 30 30 30 30 46 43 |,[eax][0|000000FC|
|000033d0| 5d 0d 0a 20 20 2e 30 30 | 30 34 38 41 44 38 3a 20 |].. .00|048AD8: |
|000033e0| 38 42 31 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |8B10 | |
|000033f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 6d 6f 76 | | mov|
|00003400| 20 20 20 20 65 64 78 2c | 5b 65 61 78 5d 0d 0a 20 | edx,|[eax].. |
|00003410| 20 2e 30 30 30 34 38 41 | 44 41 3a 20 46 46 35 32 | .00048A|DA: FF52|
|00003420| 31 30 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |10 | |
|00003430| 20 20 20 20 20 20 20 20 | 20 63 61 6c 6c 20 20 20 | | call |
|00003440| 64 2c 5b 65 64 78 5d 5b | 30 30 30 31 30 5d 0d 0a |d,[edx][|00010]..|
|00003450| 20 20 2e 30 30 30 34 38 | 41 44 44 3a 20 38 33 46 | .00048|ADD: 83F|
|00003460| 38 31 33 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |813 | |
|00003470| 20 20 20 20 20 20 20 20 | 20 20 63 6d 70 20 20 20 | | cmp |
|00003480| 20 65 61 78 2c 30 31 33 | 0d 0a 20 20 2e 30 30 30 | eax,013|.. .000|
|00003490| 34 38 41 45 30 3a 20 37 | 45 31 41 20 20 20 20 20 |48AE0: 7|E1A |
|000034a0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000034b0| 20 20 20 20 6a 6c 65 20 | 20 20 2e 30 30 30 30 34 | jle | .00004|
|000034c0| 38 41 46 43 20 20 20 2d | 2d 2d 2d 2d 2d 2d 2d 2d |8AFC -|--------|
|000034d0| 2d 20 28 32 29 0d 0a 0d | 0a 53 74 65 70 20 31 31 |- (2)...|.Step 11|
|000034e0| 2e 20 54 68 61 74 27 73 | 20 77 68 65 72 65 20 79 |. That's| where y|
|000034f0| 6f 75 20 63 61 6e 20 63 | 68 61 6e 67 65 20 74 68 |ou can c|hange th|
|00003500| 65 20 62 79 74 65 73 2c | 20 70 72 65 73 73 20 46 |e bytes,| press F|
|00003510| 33 2c 20 65 6e 74 65 72 | 20 45 42 20 61 6e 64 20 |3, enter| EB and |
|00003520| 67 6f 20 62 65 6c 6f 77 | 0d 0a 20 20 20 20 20 20 |go below|.. |
|00003530| 20 20 20 74 69 6c 6c 20 | 37 45 31 41 20 28 6f 66 | till |7E1A (of|
|00003540| 66 73 65 74 20 34 37 45 | 45 30 29 2c 20 65 6e 74 |fset 47E|E0), ent|
|00003550| 65 72 20 45 42 20 61 6e | 64 20 70 72 65 73 73 20 |er EB an|d press |
|00003560| 46 39 20 74 6f 20 75 70 | 64 61 74 65 20 4d 53 43 |F9 to up|date MSC|
|00003570| 48 45 44 2e 45 58 45 2e | 0d 0a 20 20 20 20 20 20 |HED.EXE.|.. |
|00003580| 20 20 20 45 78 69 74 20 | 48 49 45 57 2e 0d 0a 0d | Exit |HIEW....|
|00003590| 0a 53 74 65 70 20 31 32 | 2e 20 49 74 27 73 20 6e |.Step 12|. It's n|
|000035a0| 6f 74 20 64 6f 6e 65 20 | 79 65 74 21 20 4f 70 65 |ot done |yet! Ope|
|000035b0| 6e 20 53 44 52 20 77 69 | 6e 64 6f 77 20 61 6e 64 |n SDR wi|ndow and|
|000035c0| 20 64 6f 75 62 6c 65 20 | 63 6c 69 63 6b 20 6f 6e | double |click on|
|000035d0| 20 22 55 6e 72 65 67 69 | 73 74 65 72 65 64 0d 0a | "Unregi|stered..|
|000035e0| 20 20 20 20 20 20 20 20 | 20 63 6f 70 69 65 73 2e | | copies.|
|000035f0| 2e 22 20 61 67 61 69 6e | 2e 0d 0a 0d 0a 53 74 65 |." again|.....Ste|
|00003600| 70 20 31 33 2e 20 43 6c | 6f 73 65 20 53 44 52 20 |p 13. Cl|ose SDR |
|00003610| 77 69 6e 64 6f 77 2c 20 | 79 6f 75 20 73 68 6f 75 |window, |you shou|
|00003620| 6c 64 20 73 65 65 20 74 | 68 65 20 6c 69 6e 65 3a |ld see t|he line:|
|00003630| 0d 0a 0d 0a 20 20 2a 20 | 50 6f 73 73 69 62 6c 65 |.... * |Possible|
|00003640| 20 53 74 72 69 6e 67 44 | 61 74 61 20 52 65 66 20 | StringD|ata Ref |
|00003650| 66 72 6f 6d 20 43 6f 64 | 65 20 4f 62 6a 20 2d 3e |from Cod|e Obj ->|
|00003660| 22 55 6e 72 65 67 69 73 | 74 65 72 65 64 20 63 6f |"Unregis|tered co|
|00003670| 70 69 65 73 20 6f 66 20 | 4d 61 63 72 6f 2e 2e 22 |pies of |Macro.."|
|00003680| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |.. | |
|00003690| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000036a0| 20 20 20 20 20 20 20 20 | 20 20 20 20 2d 3e 22 68 | | ->"h|
|000036b0| 61 76 65 20 61 20 6c 69 | 6d 69 74 20 6f 66 20 32 |ave a li|mit of 2|
|000036c0| 30 20 6c 69 6e 65 73 20 | 70 65 72 2e 2e 22 0d 0a |0 lines |per.."..|
|000036d0| 0d 0a 20 20 3a 30 30 34 | 34 44 42 39 45 20 42 38 |.. :004|4DB9E B8|
|000036e0| 36 43 44 43 34 34 30 30 | 20 20 20 20 20 20 20 20 |6CDC4400| |
|000036f0| 20 20 20 20 20 20 6d 6f | 76 20 65 61 78 2c 20 30 | mo|v eax, 0|
|00003700| 30 34 34 44 43 36 43 0d | 0a 0d 0a 53 74 65 70 20 |044DC6C.|...Step |
|00003710| 31 34 2e 20 4f 6b 2c 20 | 70 72 65 73 73 20 55 50 |14. Ok, |press UP|
|00003720| 20 61 72 72 6f 77 20 6b | 65 79 20 74 69 6c 6c 20 | arrow k|ey till |
|00003730| 79 6f 75 20 73 65 65 3a | 0d 0a 0d 0a 20 20 3a 30 |you see:|.... :0|
|00003740| 30 34 34 44 42 37 44 20 | 37 35 32 43 20 20 20 20 |044DB7D |752C |
|00003750| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003760| 6a 6e 65 20 30 30 34 34 | 44 42 41 42 0d 0a 20 20 |jne 0044|DBAB.. |
|00003770| 3a 30 30 34 34 44 42 37 | 46 20 38 42 38 33 44 34 |:0044DB7|F 8B83D4|
|00003780| 30 39 30 30 30 30 20 20 | 20 20 20 20 20 20 20 20 |090000 | |
|00003790| 20 20 6d 6f 76 20 65 61 | 78 2c 20 64 77 6f 72 64 | mov ea|x, dword|
|000037a0| 20 70 74 72 20 5b 65 62 | 78 2b 30 30 30 30 30 39 | ptr [eb|x+000009|
|000037b0| 44 34 5d 0d 0a 20 20 3a | 30 30 34 34 44 42 38 35 |D4].. :|0044DB85|
|000037c0| 20 38 42 38 30 46 43 30 | 30 30 30 30 30 20 20 20 | 8B80FC0|00000 |
|000037d0| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 65 61 78 | | mov eax|
|000037e0| 2c 20 64 77 6f 72 64 20 | 70 74 72 20 5b 65 61 78 |, dword |ptr [eax|
|000037f0| 2b 30 30 30 30 30 30 46 | 43 5d 0d 0a 20 20 3a 30 |+000000F|C].. :0|
|00003800| 30 34 34 44 42 38 42 20 | 38 42 31 30 20 20 20 20 |044DB8B |8B10 |
|00003810| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003820| 6d 6f 76 20 65 64 78 2c | 20 64 77 6f 72 64 20 70 |mov edx,| dword p|
|00003830| 74 72 20 5b 65 61 78 5d | 0d 0a 20 20 3a 30 30 34 |tr [eax]|.. :004|
|00003840| 34 44 42 38 44 20 46 46 | 35 32 31 30 20 20 20 20 |4DB8D FF|5210 |
|00003850| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 63 61 | | ca|
|00003860| 6c 6c 20 5b 65 64 78 2b | 31 30 5d 0d 0a 20 20 3a |ll [edx+|10].. :|
|00003870| 30 30 34 34 44 42 39 30 | 20 34 38 20 20 20 20 20 |0044DB90| 48 |
|00003880| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003890| 20 64 65 63 20 65 61 78 | 0d 0a 20 20 3a 30 30 34 | dec eax|.. :004|
|000038a0| 34 44 42 39 31 20 37 45 | 31 38 20 20 20 20 20 20 |4DB91 7E|18 |
|000038b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 6a 6c | | jl|
|000038c0| 65 20 30 30 34 34 44 42 | 41 42 0d 0a 0d 0a 53 74 |e 0044DB|AB....St|
|000038d0| 65 70 20 31 35 2e 20 4c | 6f 6f 6b 20 61 74 20 30 |ep 15. L|ook at 0|
|000038e0| 30 34 34 44 42 37 44 20 | 61 6e 64 20 30 30 34 34 |044DB7D |and 0044|
|000038f0| 44 42 39 31 20 61 64 64 | 72 65 73 73 65 73 2e 20 |DB91 add|resses. |
|00003900| 49 74 27 73 20 77 68 65 | 72 65 20 69 74 20 77 69 |It's whe|re it wi|
|00003910| 6c 6c 20 6a 75 6d 70 20 | 74 6f 0d 0a 20 20 20 20 |ll jump |to.. |
|00003920| 20 20 20 20 20 77 68 65 | 6e 20 69 74 20 63 6f 6d | whe|n it com|
|00003930| 70 6c 61 69 6e 73 2e 20 | 4c 65 74 27 73 20 66 69 |plains. |Let's fi|
|00003940| 6e 64 20 6f 75 74 2e 0d | 0a 20 20 20 20 20 20 20 |nd out..|. |
|00003950| 20 20 4d 61 6b 65 20 73 | 75 72 65 20 74 68 65 20 | Make s|ure the |
|00003960| 67 72 65 65 6e 20 63 6f | 6c 6f 72 20 62 61 72 20 |green co|lor bar |
|00003970| 69 73 20 6f 6e 20 30 30 | 34 34 44 42 37 44 20 37 |is on 00|44DB7D 7|
|00003980| 35 32 43 20 20 20 20 20 | 20 20 20 6a 6e 65 20 30 |52C | jne 0|
|00003990| 30 34 34 44 42 41 42 0d | 0a 20 20 20 20 20 20 20 |044DBAB.|. |
|000039a0| 20 20 61 6e 64 20 79 6f | 75 20 73 68 6f 75 6c 64 | and yo|u should|
|000039b0| 20 73 65 65 20 4f 66 66 | 73 65 74 20 61 64 64 72 | see Off|set addr|
|000039c0| 65 73 73 20 62 65 6c 6f | 77 20 6f 6e 20 74 68 65 |ess belo|w on the|
|000039d0| 20 73 63 72 65 65 6e 20 | 6c 69 6b 65 20 40 4f 66 | screen |like @Of|
|000039e0| 66 73 65 74 0d 0a 20 20 | 20 20 20 20 20 20 20 30 |fset.. | 0|
|000039f0| 30 30 34 43 46 37 44 68 | 2e 20 49 74 27 73 20 77 |004CF7Dh|. It's w|
|00003a00| 68 65 72 65 20 79 6f 75 | 20 63 61 6e 20 70 61 74 |here you| can pat|
|00003a10| 63 68 20 69 74 20 69 6e | 20 4d 53 43 48 45 44 2e |ch it in| MSCHED.|
|00003a20| 45 58 45 2e 0d 0a 0d 0a | 53 74 65 70 20 31 36 2e |EXE.....|Step 16.|
|00003a30| 20 47 6f 20 62 61 63 6b | 20 74 6f 20 57 43 2c 20 | Go back| to WC, |
|00003a40| 72 75 6e 20 48 49 45 57 | 20 4d 53 43 48 45 44 2e |run HIEW| MSCHED.|
|00003a50| 45 58 45 2c 20 70 72 65 | 73 73 20 46 34 20 74 6f |EXE, pre|ss F4 to|
|00003a60| 20 73 65 6c 65 63 74 20 | 44 65 63 6f 64 65 20 6d | select |Decode m|
|00003a70| 6f 64 65 0d 0a 20 20 20 | 20 20 20 20 20 20 28 41 |ode.. | (A|
|00003a80| 53 4d 29 2c 20 70 72 65 | 73 73 20 46 35 20 61 6e |SM), pre|ss F5 an|
|00003a90| 64 20 65 6e 74 65 72 20 | 34 43 46 37 44 2e 20 59 |d enter |4CF7D. Y|
|00003aa0| 6f 75 20 73 68 6f 75 6c | 64 20 73 65 65 20 6c 69 |ou shoul|d see li|
|00003ab0| 6b 65 3a 0d 0a 0d 0a 20 | 20 2e 30 30 30 34 44 42 |ke:.... | .0004DB|
|00003ac0| 37 44 3a 20 37 35 32 43 | 20 20 20 20 20 20 20 20 |7D: 752C| |
|00003ad0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003ae0| 20 6a 6e 65 20 20 20 2e | 30 30 30 30 34 44 42 41 | jne .|00004DBA|
|00003af0| 42 20 20 20 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 20 28 |B ----|------ (|
|00003b00| 31 29 0d 0a 20 20 2e 30 | 30 30 34 44 42 37 46 3a |1).. .0|004DB7F:|
|00003b10| 20 38 42 38 33 44 34 30 | 39 30 30 30 30 20 20 20 | 8B83D40|90000 |
|00003b20| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 6d 6f | | mo|
|00003b30| 76 20 20 20 20 65 61 78 | 2c 5b 65 62 78 5d 5b 30 |v eax|,[ebx][0|
|00003b40| 30 30 30 30 30 39 44 34 | 5d 0d 0a 20 20 2e 30 30 |000009D4|].. .00|
|00003b50| 30 34 44 42 38 35 3a 20 | 38 42 38 30 46 43 30 30 |04DB85: |8B80FC00|
|00003b60| 30 30 30 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |0000 | |
|00003b70| 20 20 20 20 20 6d 6f 76 | 20 20 20 20 65 61 78 2c | mov| eax,|
|00003b80| 5b 65 61 78 5d 5b 30 30 | 30 30 30 30 30 46 43 5d |[eax][00|00000FC]|
|00003b90| 0d 0a 20 20 2e 30 30 30 | 34 44 42 38 42 3a 20 38 |.. .000|4DB8B: 8|
|00003ba0| 42 31 30 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |B10 | |
|00003bb0| 20 20 20 20 20 20 20 20 | 20 20 20 20 6d 6f 76 20 | | mov |
|00003bc0| 20 20 20 65 64 78 2c 5b | 65 61 78 5d 0d 0a 20 20 | edx,[|eax].. |
|00003bd0| 2e 30 30 30 34 44 42 38 | 44 3a 20 46 46 35 32 31 |.0004DB8|D: FF521|
|00003be0| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0 | |
|00003bf0| 20 20 20 20 20 20 20 20 | 63 61 6c 6c 20 20 20 64 | |call d|
|00003c00| 2c 5b 65 64 78 5d 5b 30 | 30 30 31 30 5d 0d 0a 20 |,[edx][0|0010].. |
|00003c10| 20 2e 30 30 30 34 44 42 | 39 30 3a 20 34 38 20 20 | .0004DB|90: 48 |
|00003c20| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003c30| 20 20 20 20 20 20 20 20 | 20 64 65 63 20 20 20 20 | | dec |
|00003c40| 65 61 78 0d 0a 20 20 2e | 30 30 30 34 44 42 39 31 |eax.. .|0004DB91|
|00003c50| 3a 20 37 45 31 38 20 20 | 20 20 20 20 20 20 20 20 |: 7E18 | |
|00003c60| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 6a | | j|
|00003c70| 6c 65 20 20 20 2e 30 30 | 30 30 34 44 42 41 42 20 |le .00|004DBAB |
|00003c80| 20 20 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 20 28 32 29 | ------|---- (2)|
|00003c90| 0d 0a 0d 0a 53 74 65 70 | 20 31 37 2e 20 54 68 61 |....Step| 17. Tha|
|00003ca0| 74 27 73 20 77 68 65 72 | 65 20 79 6f 75 20 63 61 |t's wher|e you ca|
|00003cb0| 6e 20 63 68 61 6e 67 65 | 20 74 68 65 20 62 79 74 |n change| the byt|
|00003cc0| 65 73 2c 20 70 72 65 73 | 73 20 46 33 2c 20 65 6e |es, pres|s F3, en|
|00003cd0| 74 65 72 20 45 42 20 61 | 6e 64 20 67 6f 20 62 65 |ter EB a|nd go be|
|00003ce0| 6c 6f 77 0d 0a 20 20 20 | 20 20 20 20 20 20 74 69 |low.. | ti|
|00003cf0| 6c 6c 20 37 45 31 38 20 | 28 6f 66 66 73 65 74 20 |ll 7E18 |(offset |
|00003d00| 34 37 46 39 31 29 2c 20 | 65 6e 74 65 72 20 45 42 |47F91), |enter EB|
|00003d10| 20 61 6e 64 20 70 72 65 | 73 73 20 46 39 20 74 6f | and pre|ss F9 to|
|00003d20| 20 75 70 64 61 74 65 20 | 4d 53 43 48 45 44 2e 45 | update |MSCHED.E|
|00003d30| 58 45 2e 0d 0a 20 20 20 | 20 20 20 20 20 20 45 78 |XE... | Ex|
|00003d40| 69 74 20 48 49 45 57 2e | 0d 0a 0d 0a 53 74 65 70 |it HIEW.|....Step|
|00003d50| 20 31 38 2e 20 4e 6f 74 | 20 64 6f 6e 65 20 79 65 | 18. Not| done ye|
|00003d60| 74 21 20 4f 70 65 6e 20 | 53 44 52 20 77 69 6e 64 |t! Open |SDR wind|
|00003d70| 6f 77 20 61 6e 64 20 64 | 6f 75 62 6c 65 20 63 6c |ow and d|ouble cl|
|00003d80| 69 63 6b 20 6f 6e 20 22 | 55 6e 72 65 67 69 73 74 |ick on "|Unregist|
|00003d90| 65 72 65 64 0d 0a 20 20 | 20 20 20 20 20 20 20 63 |ered.. | c|
|00003da0| 6f 70 69 65 73 2e 2e 22 | 20 61 67 61 69 6e 2e 0d |opies.."| again..|
|00003db0| 0a 0d 0a 53 74 65 70 20 | 31 39 2e 20 43 6c 6f 73 |...Step |19. Clos|
|00003dc0| 65 20 53 44 52 20 77 69 | 6e 64 6f 77 2c 20 79 6f |e SDR wi|ndow, yo|
|00003dd0| 75 20 73 68 6f 75 6c 64 | 20 73 65 65 20 74 68 65 |u should| see the|
|00003de0| 20 6c 69 6e 65 3a 0d 0a | 0d 0a 20 20 2a 20 50 6f | line:..|.. * Po|
|00003df0| 73 73 69 62 6c 65 20 53 | 74 72 69 6e 67 44 61 74 |ssible S|tringDat|
|00003e00| 61 20 52 65 66 20 66 72 | 6f 6d 20 43 6f 64 65 20 |a Ref fr|om Code |
|00003e10| 4f 62 6a 20 2d 3e 22 55 | 6e 72 65 67 69 73 74 65 |Obj ->"U|nregiste|
|00003e20| 72 65 64 20 63 6f 70 69 | 65 73 20 6f 66 20 4d 61 |red copi|es of Ma|
|00003e30| 63 72 6f 2e 2e 22 0d 0a | 20 20 20 20 20 20 20 20 |cro.."..| |
|00003e40| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003e50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00003e60| 20 20 2d 3e 22 68 61 76 | 65 20 61 20 6c 69 6d 69 | ->"hav|e a limi|
|00003e70| 74 20 6f 66 20 32 30 20 | 6c 69 6e 65 73 20 70 65 |t of 20 |lines pe|
|00003e80| 72 2e 2e 22 0d 0a 0d 0a | 20 20 3a 30 30 34 35 30 |r.."....| :00450|
|00003e90| 44 33 46 20 42 38 30 30 | 31 44 34 35 30 30 20 20 |D3F B800|1D4500 |
|00003ea0| 20 20 20 20 20 20 20 20 | 20 20 20 20 6d 6f 76 20 | | mov |
|00003eb0| 65 61 78 2c 20 30 30 34 | 35 31 44 30 30 0d 0a 0d |eax, 004|51D00...|
|00003ec0| 0a 53 74 65 70 20 32 30 | 2e 20 4f 6b 2c 20 70 72 |.Step 20|. Ok, pr|
|00003ed0| 65 73 73 20 55 50 20 61 | 72 72 6f 77 20 6b 65 79 |ess UP a|rrow key|
|00003ee0| 20 74 69 6c 6c 20 79 6f | 75 20 73 65 65 3a 0d 0a | till yo|u see:..|
|00003ef0| 0d 0a 20 20 3a 30 30 34 | 35 30 44 32 31 20 37 34 |.. :004|50D21 74|
|00003f00| 43 43 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |CC | |
|00003f10| 20 20 20 20 20 20 6a 65 | 20 30 30 34 35 30 43 45 | je| 00450CE|
|00003f20| 46 0d 0a 20 20 3a 30 30 | 34 35 30 44 32 33 20 38 |F.. :00|450D23 8|
|00003f30| 42 43 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |BC7 | |
|00003f40| 20 20 20 20 20 20 20 6d | 6f 76 20 65 61 78 2c 20 | m|ov eax, |
|00003f50| 65 64 69 0d 0a 20 20 3a | 30 30 34 35 30 44 32 35 |edi.. :|00450D25|
|00003f60| 20 45 38 36 36 33 35 46 | 42 46 46 20 20 20 20 20 | E86635F|BFF |
|00003f70| 20 20 20 20 20 20 20 20 | 20 63 61 6c 6c 20 30 30 | | call 00|
|00003f80| 34 30 34 32 39 30 0d 0a | 20 20 3a 30 30 34 35 30 |404290..| :00450|
|00003f90| 44 32 41 20 45 38 43 39 | 31 39 46 42 46 46 20 20 |D2A E8C9|19FBFF |
|00003fa0| 20 20 20 20 20 20 20 20 | 20 20 20 20 63 61 6c 6c | | call|
|00003fb0| 20 30 30 34 30 32 36 46 | 38 0d 0a 20 20 3a 30 30 | 004026F|8.. :00|
|00003fc0| 34 35 30 44 32 46 20 38 | 33 46 42 31 34 20 20 20 |450D2F 8|3FB14 |
|00003fd0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 63 | | c|
|00003fe0| 6d 70 20 65 62 78 2c 20 | 30 30 30 30 30 30 31 34 |mp ebx, |00000014|
|00003ff0| 0d 0a 20 20 3a 30 30 34 | 35 30 44 33 32 20 37 45 |.. :004|50D32 7E|
|00004000| 31 41 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |1A | |
|00004010| 20 20 20 20 20 20 6a 6c | 65 20 30 30 34 35 30 44 | jl|e 00450D|
|00004020| 34 45 0d 0a 0d 0a 53 74 | 65 70 20 32 31 2e 20 4c |4E....St|ep 21. L|
|00004030| 6f 6f 6b 20 61 74 20 30 | 30 34 35 30 44 33 32 20 |ook at 0|0450D32 |
|00004040| 61 64 64 72 65 73 73 2e | 20 49 74 27 73 20 77 68 |address.| It's wh|
|00004050| 65 72 65 20 69 74 20 77 | 69 6c 6c 20 6a 75 6d 70 |ere it w|ill jump|
|00004060| 20 74 6f 20 77 68 65 6e | 20 69 74 20 63 6f 6d 70 | to when| it comp|
|00004070| 6c 61 69 6e 73 0d 0a 20 | 20 20 20 20 20 20 20 20 |lains.. | |
|00004080| 61 67 61 69 6e 2c 20 6c | 65 74 27 73 20 66 69 6e |again, l|et's fin|
|00004090| 64 20 6f 75 74 2e 0d 0a | 20 20 20 20 20 20 20 20 |d out...| |
|000040a0| 20 4d 61 6b 65 20 73 75 | 72 65 20 74 68 65 20 67 | Make su|re the g|
|000040b0| 72 65 65 6e 20 63 6f 6c | 6f 72 20 62 61 72 20 69 |reen col|or bar i|
|000040c0| 73 20 6f 6e 20 30 30 34 | 35 30 44 33 32 20 37 45 |s on 004|50D32 7E|
|000040d0| 31 41 20 20 20 20 20 20 | 20 20 6a 6c 65 20 30 30 |1A | jle 00|
|000040e0| 34 35 30 44 34 45 0d 0a | 20 20 20 20 20 20 20 20 |450D4E..| |
|000040f0| 20 61 6e 64 20 79 6f 75 | 20 73 68 6f 75 6c 64 20 | and you| should |
|00004100| 73 65 65 20 4f 66 66 73 | 65 74 20 61 64 64 72 65 |see Offs|et addre|
|00004110| 73 73 20 62 65 6c 6f 77 | 20 6f 6e 20 74 68 65 20 |ss below| on the |
|00004120| 73 63 72 65 65 6e 20 6c | 69 6b 65 20 40 4f 66 66 |screen l|ike @Off|
|00004130| 73 65 74 0d 0a 20 20 20 | 20 20 20 20 20 20 30 30 |set.. | 00|
|00004140| 30 35 30 31 33 32 68 2e | 20 49 74 27 73 20 77 68 |050132h.| It's wh|
|00004150| 65 72 65 20 79 6f 75 20 | 63 61 6e 20 70 61 74 63 |ere you |can patc|
|00004160| 68 20 69 74 20 69 6e 20 | 4d 53 43 48 45 44 2e 45 |h it in |MSCHED.E|
|00004170| 58 45 2e 0d 0a 0d 0a 53 | 74 65 70 20 32 32 2e 20 |XE.....S|tep 22. |
|00004180| 47 6f 20 62 61 63 6b 20 | 74 6f 20 57 43 2c 20 72 |Go back |to WC, r|
|00004190| 75 6e 20 48 49 45 57 20 | 4d 53 43 48 45 44 2e 45 |un HIEW |MSCHED.E|
|000041a0| 58 45 2c 20 70 72 65 73 | 73 20 46 34 20 74 6f 20 |XE, pres|s F4 to |
|000041b0| 73 65 6c 65 63 74 20 44 | 65 63 6f 64 65 20 6d 6f |select D|ecode mo|
|000041c0| 64 65 0d 0a 20 20 20 20 | 20 20 20 20 20 28 41 53 |de.. | (AS|
|000041d0| 4d 29 2c 20 70 72 65 73 | 73 20 46 35 20 61 6e 64 |M), pres|s F5 and|
|000041e0| 20 65 6e 74 65 72 20 34 | 43 46 37 44 2e 20 59 6f | enter 4|CF7D. Yo|
|000041f0| 75 20 73 68 6f 75 6c 64 | 20 73 65 65 20 6c 69 6b |u should| see lik|
|00004200| 65 3a 0d 0a 0d 0a 20 20 | 2e 30 30 30 35 30 44 33 |e:.... |.00050D3|
|00004210| 32 3a 20 37 45 31 41 20 | 20 20 20 20 20 20 20 20 |2: 7E1A | |
|00004220| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004230| 6a 6c 65 20 20 20 2e 30 | 30 30 30 35 30 44 34 45 |jle .0|00050D4E|
|00004240| 20 20 20 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 20 28 34 | -----|----- (4|
|00004250| 29 0d 0a 20 20 2e 30 30 | 30 35 30 44 33 34 3a 20 |).. .00|050D34: |
|00004260| 36 41 30 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |6A00 | |
|00004270| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 70 75 73 | | pus|
|00004280| 68 20 20 20 30 30 30 0d | 0a 20 20 2e 30 30 30 35 |h 000.|. .0005|
|00004290| 30 44 33 36 3a 20 36 36 | 38 42 30 44 46 34 31 43 |0D36: 66|8B0DF41C|
|000042a0| 34 35 30 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |4500 | |
|000042b0| 20 20 20 6d 6f 76 20 20 | 20 20 63 78 2c 5b 30 30 | mov | cx,[00|
|000042c0| 30 34 35 31 43 46 34 5d | 0d 0a 0d 0a 53 74 65 70 |0451CF4]|....Step|
|000042d0| 20 32 33 2e 20 54 68 61 | 74 27 73 20 77 68 65 72 | 23. Tha|t's wher|
|000042e0| 65 20 79 6f 75 20 63 61 | 6e 20 63 68 61 6e 67 65 |e you ca|n change|
|000042f0| 20 74 68 65 20 62 79 74 | 65 73 2c 20 70 72 65 73 | the byt|es, pres|
|00004300| 73 20 46 33 2c 20 65 6e | 74 65 72 20 45 42 20 61 |s F3, en|ter EB a|
|00004310| 6e 64 20 70 72 65 73 73 | 0d 0a 20 20 20 20 20 20 |nd press|.. |
|00004320| 20 20 20 46 39 20 74 6f | 20 75 70 64 61 74 65 20 | F9 to| update |
|00004330| 4d 53 43 48 45 44 2e 45 | 58 45 2e 20 45 78 69 74 |MSCHED.E|XE. Exit|
|00004340| 20 48 49 45 57 2e 0d 0a | 0d 0a 53 74 65 70 20 32 | HIEW...|..Step 2|
|00004350| 34 2e 20 49 74 27 73 20 | 6e 6f 74 20 64 6f 6e 65 |4. It's |not done|
|00004360| 20 79 65 74 21 20 28 6f | 6e 65 20 6d 6f 72 65 20 | yet! (o|ne more |
|00004370| 3a 2d 29 29 20 4f 70 65 | 6e 20 53 44 52 20 77 69 |:-)) Ope|n SDR wi|
|00004380| 6e 64 6f 77 20 61 6e 64 | 20 64 6f 75 62 6c 65 20 |ndow and| double |
|00004390| 63 6c 69 63 6b 0d 0a 20 | 20 20 20 20 20 20 20 20 |click.. | |
|000043a0| 6f 6e 20 22 55 6e 72 65 | 67 69 73 74 65 72 65 64 |on "Unre|gistered|
|000043b0| 20 63 6f 70 69 65 73 2e | 2e 22 20 61 67 61 69 6e | copies.|." again|
|000043c0| 2e 0d 0a 0d 0a 53 74 65 | 70 20 32 35 2e 20 43 6c |.....Ste|p 25. Cl|
|000043d0| 6f 73 65 20 53 44 52 20 | 77 69 6e 64 6f 77 2c 20 |ose SDR |window, |
|000043e0| 79 6f 75 20 73 68 6f 75 | 6c 64 20 73 65 65 20 74 |you shou|ld see t|
|000043f0| 68 65 20 6c 69 6e 65 3a | 0d 0a 0d 0a 20 20 2a 20 |he line:|.... * |
|00004400| 50 6f 73 73 69 62 6c 65 | 20 53 74 72 69 6e 67 44 |Possible| StringD|
|00004410| 61 74 61 20 52 65 66 20 | 66 72 6f 6d 20 43 6f 64 |ata Ref |from Cod|
|00004420| 65 20 4f 62 6a 20 2d 3e | 22 55 6e 72 65 67 69 73 |e Obj ->|"Unregis|
|00004430| 74 65 72 65 64 20 63 6f | 70 69 65 73 20 6f 66 20 |tered co|pies of |
|00004440| 4d 61 63 72 6f 2e 2e 22 | 0d 0a 20 20 20 20 20 20 |Macro.."|.. |
|00004450| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004460| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004470| 20 20 20 20 2d 3e 22 68 | 61 76 65 20 61 20 6c 69 | ->"h|ave a li|
|00004480| 6d 69 74 20 6f 66 20 32 | 30 20 6c 69 6e 65 73 20 |mit of 2|0 lines |
|00004490| 70 65 72 2e 2e 22 0d 0a | 0d 0a 20 20 3a 30 30 34 |per.."..|.. :004|
|000044a0| 35 32 44 32 35 20 42 38 | 45 38 32 46 34 35 30 30 |52D25 B8|E82F4500|
|000044b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 6d 6f | | mo|
|000044c0| 76 20 65 61 78 2c 20 30 | 30 34 35 32 46 45 38 0d |v eax, 0|0452FE8.|
|000044d0| 0a 0d 0a 53 74 65 70 20 | 32 36 2e 20 4f 6b 2c 20 |...Step |26. Ok, |
|000044e0| 70 72 65 73 73 20 55 50 | 20 61 72 72 6f 77 20 6b |press UP| arrow k|
|000044f0| 65 79 20 74 69 6c 6c 20 | 79 6f 75 20 73 65 65 3a |ey till |you see:|
|00004500| 0d 0a 0d 0a 20 20 3a 30 | 30 34 35 32 44 30 31 20 |.... :0|0452D01 |
|00004510| 37 35 33 31 20 20 20 20 | 20 20 20 20 20 20 20 20 |7531 | |
|00004520| 20 20 20 20 20 20 20 20 | 6a 6e 65 20 30 30 34 35 | |jne 0045|
|00004530| 32 44 33 34 0d 0a 20 20 | 3a 30 30 34 35 32 44 30 |2D34.. |:00452D0|
|00004540| 33 20 38 42 34 35 46 43 | 20 20 20 20 20 20 20 20 |3 8B45FC| |
|00004550| 20 20 20 20 20 20 20 20 | 20 20 6d 6f 76 20 65 61 | | mov ea|
|00004560| 78 2c 20 64 77 6f 72 64 | 20 70 74 72 20 5b 65 62 |x, dword| ptr [eb|
|00004570| 70 2d 30 34 5d 0d 0a 20 | 20 3a 30 30 34 35 32 44 |p-04].. | :00452D|
|00004580| 30 36 20 38 42 38 30 44 | 34 30 39 30 30 30 30 20 |06 8B80D|4090000 |
|00004590| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 65 | | mov e|
|000045a0| 61 78 2c 20 64 77 6f 72 | 64 20 70 74 72 20 5b 65 |ax, dwor|d ptr [e|
|000045b0| 61 78 2b 30 30 30 30 30 | 39 44 34 5d 0d 0a 20 20 |ax+00000|9D4].. |
|000045c0| 3a 30 30 34 35 32 44 30 | 43 20 38 42 38 30 46 43 |:00452D0|C 8B80FC|
|000045d0| 30 30 30 30 30 30 20 20 | 20 20 20 20 20 20 20 20 |000000 | |
|000045e0| 20 20 6d 6f 76 20 65 61 | 78 2c 20 64 77 6f 72 64 | mov ea|x, dword|
|000045f0| 20 70 74 72 20 5b 65 61 | 78 2b 30 30 30 30 30 30 | ptr [ea|x+000000|
|00004600| 46 43 5d 0d 0a 20 20 3a | 30 30 34 35 32 44 31 32 |FC].. :|00452D12|
|00004610| 20 38 42 31 30 20 20 20 | 20 20 20 20 20 20 20 20 | 8B10 | |
|00004620| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 65 64 78 | | mov edx|
|00004630| 2c 20 64 77 6f 72 64 20 | 70 74 72 20 5b 65 61 78 |, dword |ptr [eax|
|00004640| 5d 0d 0a 20 20 3a 30 30 | 34 35 32 44 31 34 20 46 |].. :00|452D14 F|
|00004650| 46 35 32 31 30 20 20 20 | 20 20 20 20 20 20 20 20 |F5210 | |
|00004660| 20 20 20 20 20 20 20 63 | 61 6c 6c 20 5b 65 64 78 | c|all [edx|
|00004670| 2b 31 30 5d 0d 0a 20 20 | 3a 30 30 34 35 32 44 31 |+10].. |:00452D1|
|00004680| 37 20 34 38 20 20 20 20 | 20 20 20 20 20 20 20 20 |7 48 | |
|00004690| 20 20 20 20 20 20 20 20 | 20 20 64 65 63 20 65 61 | | dec ea|
|000046a0| 78 0d 0a 20 20 3a 30 30 | 34 35 32 44 31 38 20 37 |x.. :00|452D18 7|
|000046b0| 45 31 41 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |E1A | |
|000046c0| 20 20 20 20 20 20 20 6a | 6c 65 20 30 30 34 35 32 | j|le 00452|
|000046d0| 44 33 34 0d 0a 0d 0a 53 | 74 65 70 20 32 37 2e 20 |D34....S|tep 27. |
|000046e0| 4c 6f 6f 6b 20 61 74 20 | 30 30 34 35 32 44 30 31 |Look at |00452D01|
|000046f0| 20 61 6e 64 20 30 30 34 | 35 32 44 31 38 20 61 64 | and 004|52D18 ad|
|00004700| 64 72 65 73 73 65 73 2e | 20 49 74 27 73 20 77 68 |dresses.| It's wh|
|00004710| 65 72 65 20 69 74 20 77 | 69 6c 6c 20 6a 75 6d 70 |ere it w|ill jump|
|00004720| 20 74 6f 0d 0a 20 20 20 | 20 20 20 20 20 20 77 68 | to.. | wh|
|00004730| 65 6e 20 69 74 20 63 6f | 6d 70 6c 61 69 6e 73 2e |en it co|mplains.|
|00004740| 20 4c 65 74 27 73 20 66 | 69 6e 64 20 6f 75 74 2e | Let's f|ind out.|
|00004750| 0d 0a 20 20 20 20 20 20 | 20 20 20 4d 61 6b 65 20 |.. | Make |
|00004760| 73 75 72 65 20 74 68 65 | 20 67 72 65 65 6e 20 63 |sure the| green c|
|00004770| 6f 6c 6f 72 20 62 61 72 | 20 69 73 20 6f 6e 20 30 |olor bar| is on 0|
|00004780| 30 34 35 32 44 30 31 20 | 37 35 33 31 20 20 20 20 |0452D01 |7531 |
|00004790| 20 20 20 20 6a 6e 65 20 | 30 30 34 35 32 44 33 34 | jne |00452D34|
|000047a0| 0d 0a 20 20 20 20 20 20 | 20 20 20 61 6e 64 20 79 |.. | and y|
|000047b0| 6f 75 20 73 68 6f 75 6c | 64 20 73 65 65 20 4f 66 |ou shoul|d see Of|
|000047c0| 66 73 65 74 20 61 64 64 | 72 65 73 73 20 62 65 6c |fset add|ress bel|
|000047d0| 6f 77 20 6f 6e 20 74 68 | 65 20 73 63 72 65 65 6e |ow on th|e screen|
|000047e0| 20 6c 69 6b 65 20 40 4f | 66 66 73 65 74 0d 0a 20 | like @O|ffset.. |
|000047f0| 20 20 20 20 20 20 20 20 | 30 30 30 35 32 31 30 31 | |00052101|
|00004800| 68 2e 20 49 74 27 73 20 | 77 68 65 72 65 20 79 6f |h. It's |where yo|
|00004810| 75 20 63 61 6e 20 70 61 | 74 63 68 20 69 74 20 69 |u can pa|tch it i|
|00004820| 6e 20 4d 53 43 48 45 44 | 2e 45 58 45 2e 0d 0a 0d |n MSCHED|.EXE....|
|00004830| 0a 53 74 65 70 20 32 38 | 2e 20 47 6f 20 62 61 63 |.Step 28|. Go bac|
|00004840| 6b 20 74 6f 20 57 43 2c | 20 72 75 6e 20 48 49 45 |k to WC,| run HIE|
|00004850| 57 20 4d 53 43 48 45 44 | 2e 45 58 45 2c 20 70 72 |W MSCHED|.EXE, pr|
|00004860| 65 73 73 20 46 34 20 74 | 6f 20 73 65 6c 65 63 74 |ess F4 t|o select|
|00004870| 20 44 65 63 6f 64 65 20 | 6d 6f 64 65 0d 0a 20 20 | Decode |mode.. |
|00004880| 20 20 20 20 20 20 20 28 | 41 53 4d 29 2c 20 70 72 | (|ASM), pr|
|00004890| 65 73 73 20 46 35 20 61 | 6e 64 20 65 6e 74 65 72 |ess F5 a|nd enter|
|000048a0| 20 35 32 31 30 31 2e 20 | 59 6f 75 20 73 68 6f 75 | 52101. |You shou|
|000048b0| 6c 64 20 73 65 65 20 6c | 69 6b 65 3a 0d 0a 0d 0a |ld see l|ike:....|
|000048c0| 20 20 2e 30 30 30 35 32 | 44 30 31 3a 20 37 35 33 | .00052|D01: 753|
|000048d0| 31 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |1 | |
|000048e0| 20 20 20 20 20 20 20 20 | 20 20 6a 6e 65 20 20 20 | | jne |
|000048f0| 2e 30 30 30 30 35 32 44 | 33 34 20 20 20 2d 2d 2d |.000052D|34 ---|
|00004900| 2d 2d 2d 2d 2d 2d 2d 20 | 28 31 29 0d 0a 20 20 2e |------- |(1).. .|
|00004910| 30 30 30 35 32 44 30 33 | 3a 20 38 42 34 35 46 43 |00052D03|: 8B45FC|
|00004920| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004930| 20 20 20 20 20 20 20 6d | 6f 76 20 20 20 20 65 61 | m|ov ea|
|00004940| 78 2c 5b 65 62 70 5d 5b | 2d 30 30 30 34 5d 0d 0a |x,[ebp][|-0004]..|
|00004950| 20 20 2e 30 30 30 35 32 | 44 30 36 3a 20 38 42 38 | .00052|D06: 8B8|
|00004960| 30 44 34 30 39 30 30 30 | 30 20 20 20 20 20 20 20 |0D409000|0 |
|00004970| 20 20 20 20 20 20 20 20 | 20 20 6d 6f 76 20 20 20 | | mov |
|00004980| 20 65 61 78 2c 5b 65 61 | 78 5d 5b 30 30 30 30 30 | eax,[ea|x][00000|
|00004990| 30 39 44 34 5d 0d 0a 20 | 20 2e 30 30 30 35 32 44 |09D4].. | .00052D|
|000049a0| 30 43 3a 20 38 42 38 30 | 46 43 30 30 30 30 30 30 |0C: 8B80|FC000000|
|000049b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000049c0| 20 6d 6f 76 20 20 20 20 | 65 61 78 2c 5b 65 61 78 | mov |eax,[eax|
|000049d0| 5d 5b 30 30 30 30 30 30 | 30 46 43 5d 0d 0a 20 20 |][000000|0FC].. |
|000049e0| 2e 30 30 30 35 32 44 31 | 32 3a 20 38 42 31 30 20 |.00052D1|2: 8B10 |
|000049f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004a00| 20 20 20 20 20 20 20 20 | 6d 6f 76 20 20 20 20 65 | |mov e|
|00004a10| 64 78 2c 5b 65 61 78 5d | 0d 0a 20 20 2e 30 30 30 |dx,[eax]|.. .000|
|00004a20| 35 32 44 31 34 3a 20 46 | 46 35 32 31 30 20 20 20 |52D14: F|F5210 |
|00004a30| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004a40| 20 20 20 20 63 61 6c 6c | 20 20 20 64 2c 5b 65 64 | call| d,[ed|
|00004a50| 78 5d 5b 30 30 30 31 30 | 5d 0d 0a 20 20 2e 30 30 |x][00010|].. .00|
|00004a60| 30 35 32 44 31 37 3a 20 | 34 38 20 20 20 20 20 20 |052D17: |48 |
|00004a70| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00004a80| 20 20 20 20 20 64 65 63 | 20 20 20 20 65 61 78 0d | dec| eax.|
|00004a90| 0a 20 20 2e 30 30 30 35 | 32 44 31 38 3a 20 37 45 |. .0005|2D18: 7E|
|00004aa0| 31 41 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |1A | |
|00004ab0| 20 20 20 20 20 20 20 20 | 20 20 20 6a 6c 65 20 20 | | jle |
|00004ac0| 20 2e 30 30 30 30 35 32 | 44 33 34 20 20 20 2d 2d | .000052|D34 --|
|00004ad0| 2d 2d 2d 2d 2d 2d 2d 2d | 20 28 32 29 0d 0a 0d 0a |--------| (2)....|
|00004ae0| 53 74 65 70 20 32 39 2e | 20 54 68 61 74 27 73 20 |Step 29.| That's |
|00004af0| 77 68 65 72 65 20 79 6f | 75 20 63 61 6e 20 63 68 |where yo|u can ch|
|00004b00| 61 6e 67 65 20 74 68 65 | 20 62 79 74 65 73 2c 20 |ange the| bytes, |
|00004b10| 70 72 65 73 73 20 46 33 | 2c 20 65 6e 74 65 72 20 |press F3|, enter |
|00004b20| 45 42 20 61 6e 64 20 67 | 6f 20 62 65 6c 6f 77 0d |EB and g|o below.|
|00004b30| 0a 20 20 20 20 20 20 20 | 20 20 74 69 6c 6c 20 37 |. | till 7|
|00004b40| 45 31 41 20 28 6f 66 66 | 73 65 74 20 35 32 31 31 |E1A (off|set 5211|
|00004b50| 38 29 2c 20 65 6e 74 65 | 72 20 45 42 20 61 6e 64 |8), ente|r EB and|
|00004b60| 20 70 72 65 73 73 20 46 | 39 20 74 6f 20 75 70 64 | press F|9 to upd|
|00004b70| 61 74 65 20 4d 53 43 48 | 45 44 2e 45 58 45 2e 0d |ate MSCH|ED.EXE..|
|00004b80| 0a 20 20 20 20 20 20 20 | 20 20 45 78 69 74 20 48 |. | Exit H|
|00004b90| 49 45 57 2e 0d 0a 0d 0a | 53 74 65 70 20 33 30 2e |IEW.....|Step 30.|
|00004ba0| 20 46 69 6e 61 6c 6c 79 | 2c 20 72 75 6e 20 4d 53 | Finally|, run MS|
|00004bb0| 43 48 45 44 2e 45 58 45 | 20 61 6e 64 20 74 72 79 |CHED.EXE| and try|
|00004bc0| 20 74 6f 20 61 64 64 20 | 6d 6f 72 65 20 6d 61 63 | to add |more mac|
|00004bd0| 72 6f 73 20 6f 72 20 74 | 6f 20 61 64 64 20 6d 6f |ros or t|o add mo|
|00004be0| 72 65 20 74 68 61 6e 0d | 0a 20 20 20 20 20 20 20 |re than.|. |
|00004bf0| 20 20 32 30 20 6c 69 6e | 65 73 20 69 6e 20 61 20 | 20 lin|es in a |
|00004c00| 73 63 72 69 70 74 2e 20 | 44 6f 65 73 20 69 74 20 |script. |Does it |
|00004c10| 77 6f 72 6b 3f 20 4b 65 | 77 6c 2c 20 79 6f 75 27 |work? Ke|wl, you'|
|00004c20| 76 65 20 6d 61 64 65 20 | 69 74 21 21 0d 0a 0d 0a |ve made |it!!....|
|00004c30| 0d 0a 50 41 52 54 20 33 | 3a 20 54 6f 20 63 72 61 |..PART 3|: To cra|
|00004c40| 63 6b 20 54 72 61 79 43 | 61 6c 20 31 2e 30 20 28 |ck TrayC|al 1.0 (|
|00004c50| 74 6f 20 65 6e 74 65 72 | 20 61 6e 79 20 63 6f 64 |to enter| any cod|
|00004c60| 65 73 29 0d 0a 0d 0a 53 | 74 65 70 20 31 2e 20 52 |es)....S|tep 1. R|
|00004c70| 75 6e 20 54 52 41 59 43 | 41 4c 2e 45 58 45 0d 0a |un TRAYC|AL.EXE..|
|00004c80| 0d 0a 53 74 65 70 20 32 | 2e 20 45 6e 74 65 72 20 |..Step 2|. Enter |
|00004c90| 79 6f 75 72 20 6e 61 6d | 65 20 61 6e 64 20 63 6f |your nam|e and co|
|00004ca0| 64 65 73 2c 20 79 6f 75 | 27 6c 6c 20 73 65 65 20 |des, you|'ll see |
|00004cb0| 74 68 65 20 65 72 72 6f | 72 20 6d 65 73 73 61 67 |the erro|r messag|
|00004cc0| 65 20 77 68 69 63 68 20 | 69 74 20 73 61 79 73 0d |e which |it says.|
|00004cd0| 0a 20 20 20 20 20 20 20 | 20 74 68 61 74 20 79 6f |. | that yo|
|00004ce0| 75 27 76 65 20 65 6e 74 | 65 72 65 64 20 69 6e 76 |u've ent|ered inv|
|00004cf0| 61 6c 69 64 20 63 6f 64 | 65 73 2e 20 28 59 6f 75 |alid cod|es. (You|
|00004d00| 20 73 68 6f 75 6c 64 20 | 77 72 69 74 65 20 64 6f | should |write do|
|00004d10| 77 6e 20 74 68 69 73 20 | 6d 65 73 73 61 67 65 29 |wn this |message)|
|00004d20| 0d 0a 20 20 20 20 20 20 | 20 20 61 6e 64 20 65 78 |.. | and ex|
|00004d30| 69 74 20 74 68 65 20 70 | 72 6f 67 72 61 6d 2e 0d |it the p|rogram..|
|00004d40| 0a 0d 0a 53 74 65 70 20 | 33 2e 20 4f 6b 2c 20 65 |...Step |3. Ok, e|
|00004d50| 78 69 74 20 74 68 65 20 | 70 72 6f 67 72 61 6d 2e |xit the |program.|
|00004d60| 0d 0a 0d 0a 53 74 65 70 | 20 34 2e 20 52 75 6e 20 |....Step| 4. Run |
|00004d70| 57 43 2c 20 67 6f 20 74 | 6f 20 54 72 61 79 43 61 |WC, go t|o TrayCa|
|00004d80| 6c 20 64 69 72 65 63 74 | 6f 72 79 2e 0d 0a 0d 0a |l direct|ory.....|
|00004d90| 53 74 65 70 20 35 2e 20 | 43 6f 70 79 20 54 52 41 |Step 5. |Copy TRA|
|00004da0| 59 43 41 4c 2e 45 58 45 | 20 74 6f 20 54 52 41 59 |YCAL.EXE| to TRAY|
|00004db0| 43 41 4c 2e 45 58 58 20 | 28 66 6f 72 20 62 61 63 |CAL.EXX |(for bac|
|00004dc0| 6b 75 70 29 20 61 6e 64 | 20 63 6f 70 79 20 54 52 |kup) and| copy TR|
|00004dd0| 41 59 43 41 4c 2e 45 58 | 45 20 74 6f 0d 0a 20 20 |AYCAL.EX|E to.. |
|00004de0| 20 20 20 20 20 20 54 52 | 41 59 43 41 4c 2e 57 33 | TR|AYCAL.W3|
|00004df0| 32 20 28 66 6f 72 20 75 | 73 65 20 62 79 20 57 33 |2 (for u|se by W3|
|00004e00| 32 44 61 73 6d 29 0d 0a | 0d 0a 53 74 65 70 20 36 |2Dasm)..|..Step 6|
|00004e10| 2e 20 52 75 6e 20 57 33 | 32 44 61 73 6d 20 61 6e |. Run W3|2Dasm an|
|00004e20| 64 20 64 69 73 61 73 73 | 65 6d 62 6c 65 20 54 52 |d disass|emble TR|
|00004e30| 41 59 43 41 4c 2e 57 33 | 32 0d 0a 0d 0a 53 74 65 |AYCAL.W3|2....Ste|
|00004e40| 70 20 37 2e 20 4f 6e 63 | 65 20 69 74 27 73 20 64 |p 7. Onc|e it's d|
|00004e50| 69 73 61 73 73 65 6d 62 | 6c 65 64 2c 20 63 6c 69 |isassemb|led, cli|
|00004e60| 63 6b 20 53 54 52 49 4e | 47 20 44 41 54 41 20 52 |ck STRIN|G DATA R|
|00004e70| 45 46 45 52 45 4e 43 45 | 2c 20 6c 6f 6f 6b 20 64 |EFERENCE|, look d|
|00004e80| 6f 77 6e 20 66 6f 72 20 | 74 68 65 0d 0a 20 20 20 |own for |the.. |
|00004e90| 20 20 20 20 20 73 74 72 | 69 6e 67 20 22 53 6f 72 | str|ing "Sor|
|00004ea0| 72 79 2c 20 69 6e 76 61 | 6c 69 64 20 72 65 67 69 |ry, inva|lid regi|
|00004eb0| 73 74 72 61 74 69 6f 6e | 20 63 6f 64 65 2e 2e 22 |stration| code.."|
|00004ec0| 2e 0d 0a 20 20 20 20 20 | 20 20 20 28 59 6f 75 20 |... | (You |
|00004ed0| 73 68 6f 75 6c 64 20 72 | 65 6d 65 6d 62 65 72 20 |should r|emember |
|00004ee0| 74 68 61 74 20 65 72 72 | 6f 72 20 6d 65 73 73 61 |that err|or messa|
|00004ef0| 67 65 29 2c 20 64 6f 75 | 62 6c 65 20 63 6c 69 63 |ge), dou|ble clic|
|00004f00| 6b 20 6f 6e 20 69 74 2e | 0d 0a 0d 0a 53 74 65 70 |k on it.|....Step|
|00004f10| 20 38 2e 20 43 6c 6f 73 | 65 20 53 44 52 20 77 69 | 8. Clos|e SDR wi|
|00004f20| 6e 64 6f 77 2c 20 79 6f | 75 20 73 68 6f 75 6c 64 |ndow, yo|u should|
|00004f30| 20 73 65 65 20 74 68 65 | 20 6c 69 6e 65 3a 0d 0a | see the| line:..|
|00004f40| 0d 0a 20 20 3a 30 30 34 | 33 46 44 33 30 20 37 45 |.. :004|3FD30 7E|
|00004f50| 31 41 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |1A | |
|00004f60| 20 20 20 20 20 20 6a 6c | 65 20 30 30 34 33 46 44 | jl|e 0043FD|
|00004f70| 34 43 0d 0a 20 20 3a 30 | 30 34 33 46 44 33 32 20 |4C.. :0|043FD32 |
|00004f80| 36 41 30 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |6A00 | |
|00004f90| 20 20 20 20 20 20 20 20 | 70 75 73 68 20 30 30 30 | |push 000|
|00004fa0| 30 30 30 30 30 0d 0a 20 | 20 3a 30 30 34 33 46 44 |00000.. | :0043FD|
|00004fb0| 33 34 20 36 36 38 42 30 | 44 45 34 46 46 34 33 30 |34 668B0|DE4FF430|
|00004fc0| 30 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 63 |0 | mov c|
|00004fd0| 78 2c 20 77 6f 72 64 20 | 70 74 72 20 5b 30 30 34 |x, word |ptr [004|
|00004fe0| 33 46 46 45 34 5d 0d 0a | 20 20 3a 30 30 34 33 46 |3FFE4]..| :0043F|
|00004ff0| 44 33 42 20 33 33 44 32 | 20 20 20 20 20 20 20 20 |D3B 33D2| |
|00005000| 20 20 20 20 20 20 20 20 | 20 20 20 20 78 6f 72 20 | | xor |
|00005010| 65 64 78 2c 20 65 64 78 | 0d 0a 0d 0a 20 20 2a 20 |edx, edx|.... * |
|00005020| 50 6f 73 73 69 62 6c 65 | 20 53 74 72 69 6e 67 44 |Possible| StringD|
|00005030| 61 74 61 20 52 65 66 20 | 66 72 6f 6d 20 43 6f 64 |ata Ref |from Cod|
|00005040| 65 20 4f 62 6a 20 2d 3e | 22 53 6f 72 72 79 2c 20 |e Obj ->|"Sorry, |
|00005050| 69 6e 76 61 6c 69 64 20 | 72 65 67 69 73 74 72 61 |invalid |registra|
|00005060| 74 69 6f 6e 20 63 6f 64 | 65 2e 22 0d 0a 0d 0a 20 |tion cod|e.".... |
|00005070| 20 20 20 20 20 20 20 20 | 4c 6f 6f 6b 20 61 74 20 | |Look at |
|00005080| 30 30 34 33 46 44 33 30 | 20 61 64 64 72 65 73 73 |0043FD30| address|
|00005090| 2c 20 69 74 27 73 20 77 | 68 65 72 65 20 69 74 27 |, it's w|here it'|
|000050a0| 6c 6c 20 6a 75 6d 70 20 | 74 6f 20 77 68 65 6e 20 |ll jump |to when |
|000050b0| 69 6e 76 61 6c 69 64 20 | 63 6f 64 65 73 2e 20 0d |invalid |codes. .|
|000050c0| 0a 20 20 20 20 20 20 20 | 20 20 4c 65 74 27 73 20 |. | Let's |
|000050d0| 74 72 79 2e 0d 0a 20 20 | 20 20 20 20 20 20 20 4d |try... | M|
|000050e0| 61 6b 65 20 73 75 72 65 | 20 74 68 65 20 67 72 65 |ake sure| the gre|
|000050f0| 65 6e 20 63 6f 6c 6f 72 | 20 62 61 72 20 69 73 20 |en color| bar is |
|00005100| 6f 6e 20 30 30 34 33 46 | 44 33 30 20 37 45 31 41 |on 0043F|D30 7E1A|
|00005110| 20 20 20 20 20 20 20 20 | 6a 6c 65 20 30 30 34 33 | |jle 0043|
|00005120| 46 44 34 43 20 0d 0a 20 | 20 20 20 20 20 20 20 20 |FD4C .. | |
|00005130| 61 6e 64 20 79 6f 75 20 | 73 68 6f 75 6c 64 20 73 |and you |should s|
|00005140| 65 65 20 4f 66 66 73 65 | 74 20 61 64 64 72 65 73 |ee Offse|t addres|
|00005150| 73 20 62 65 6c 6f 77 20 | 6f 6e 20 74 68 65 20 73 |s below |on the s|
|00005160| 63 72 65 65 6e 20 6c 69 | 6b 65 20 40 4f 66 66 73 |creen li|ke @Offs|
|00005170| 65 74 0d 0a 20 20 20 20 | 20 20 20 20 20 30 30 30 |et.. | 000|
|00005180| 33 46 31 33 30 68 2e 20 | 49 74 27 73 20 77 68 65 |3F130h. |It's whe|
|00005190| 72 65 20 79 6f 75 20 63 | 61 6e 20 70 61 74 63 68 |re you c|an patch|
|000051a0| 20 69 74 20 69 6e 20 54 | 52 41 59 43 41 4c 2e 45 | it in T|RAYCAL.E|
|000051b0| 58 45 2e 0d 0a 0d 0a 53 | 74 65 70 20 39 2e 20 47 |XE.....S|tep 9. G|
|000051c0| 6f 20 62 61 63 6b 20 74 | 6f 20 57 43 2c 20 72 75 |o back t|o WC, ru|
|000051d0| 6e 20 48 49 45 57 20 54 | 52 41 59 43 41 4c 2e 45 |n HIEW T|RAYCAL.E|
|000051e0| 58 45 2c 20 70 72 65 73 | 73 20 46 34 20 74 6f 20 |XE, pres|s F4 to |
|000051f0| 73 65 6c 65 63 74 20 44 | 65 63 6f 64 65 20 6d 6f |select D|ecode mo|
|00005200| 64 65 0d 0a 20 20 20 20 | 20 20 20 20 28 41 53 4d |de.. | (ASM|
|00005210| 29 2c 20 70 72 65 73 73 | 20 46 35 20 61 6e 64 20 |), press| F5 and |
|00005220| 65 6e 74 65 72 20 33 46 | 31 33 30 2e 20 59 6f 75 |enter 3F|130. You|
|00005230| 20 73 68 6f 75 6c 64 20 | 73 65 65 20 6c 69 6b 65 | should |see like|
|00005240| 3a 0d 0a 0d 0a 20 20 2e | 30 30 30 33 46 44 33 30 |:.... .|0003FD30|
|00005250| 3a 20 37 45 31 41 20 20 | 20 20 20 20 20 20 20 20 |: 7E1A | |
|00005260| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 6a | | j|
|00005270| 6c 65 20 20 20 2e 30 30 | 30 30 33 46 44 34 43 20 |le .00|003FD4C |
|00005280| 20 20 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 20 28 31 29 | ------|---- (1)|
|00005290| 0d 0a 20 20 2e 30 30 30 | 33 46 44 33 32 3a 20 36 |.. .000|3FD32: 6|
|000052a0| 41 30 30 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |A00 | |
|000052b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 70 75 73 68 | | push|
|000052c0| 20 20 20 30 30 30 0d 0a | 20 20 2e 30 30 30 33 46 | 000..| .0003F|
|000052d0| 44 33 34 3a 20 36 36 38 | 42 30 44 45 34 46 46 34 |D34: 668|B0DE4FF4|
|000052e0| 33 30 30 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |300 | |
|000052f0| 20 20 6d 6f 76 20 20 20 | 20 63 78 2c 5b 30 30 30 | mov | cx,[000|
|00005300| 34 33 46 46 45 34 5d 0d | 0a 20 20 2e 30 30 30 33 |43FFE4].|. .0003|
|00005310| 46 44 33 42 3a 20 33 33 | 44 32 20 20 20 20 20 20 |FD3B: 33|D2 |
|00005320| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00005330| 20 20 20 78 6f 72 20 20 | 20 20 65 64 78 2c 65 64 | xor | edx,ed|
|00005340| 78 0d 0a 0d 0a 53 74 65 | 70 20 31 30 2e 20 54 68 |x....Ste|p 10. Th|
|00005350| 61 74 27 73 20 77 68 65 | 72 65 20 79 6f 75 20 63 |at's whe|re you c|
|00005360| 61 6e 20 63 68 61 6e 67 | 65 20 74 68 65 20 62 79 |an chang|e the by|
|00005370| 74 65 73 2c 20 70 72 65 | 73 73 20 46 33 2c 20 65 |tes, pre|ss F3, e|
|00005380| 6e 74 65 72 20 45 42 2c | 20 70 72 65 73 73 20 46 |nter EB,| press F|
|00005390| 39 0d 0a 20 20 20 20 20 | 20 20 20 20 74 6f 20 75 |9.. | to u|
|000053a0| 70 64 61 74 65 20 54 52 | 41 59 43 41 4c 2e 45 58 |pdate TR|AYCAL.EX|
|000053b0| 45 2e 20 45 78 69 74 20 | 48 49 45 57 2e 0d 0a 0d |E. Exit |HIEW....|
|000053c0| 0a 53 74 65 70 20 31 31 | 2e 20 52 75 6e 20 54 52 |.Step 11|. Run TR|
|000053d0| 41 59 43 41 4c 2e 45 58 | 45 2c 20 64 6f 65 73 20 |AYCAL.EX|E, does |
|000053e0| 69 74 20 77 6f 72 6b 3f | 20 4e 61 68 2c 20 69 74 |it work?| Nah, it|
|000053f0| 20 63 6f 6d 70 61 72 65 | 73 20 61 6c 73 6f 20 73 | compare|s also s|
|00005400| 68 69 74 20 69 6e 20 72 | 65 67 69 73 74 72 79 21 |hit in r|egistry!|
|00005410| 0d 0a 0d 0a 53 74 65 70 | 20 31 32 2e 20 47 6f 20 |....Step| 12. Go |
|00005420| 62 61 63 6b 20 74 6f 20 | 57 33 32 44 61 73 6d 2c |back to |W32Dasm,|
|00005430| 20 63 6c 69 63 6b 20 61 | 67 61 69 6e 20 6f 6e 20 | click a|gain on |
|00005440| 22 53 6f 72 72 79 2c 20 | 69 6e 76 61 6c 69 64 20 |"Sorry, |invalid |
|00005450| 72 65 67 69 73 74 72 61 | 74 69 6f 6e 2e 2e 22 20 |registra|tion.." |
|00005460| 20 20 20 0d 0a 0d 0a 53 | 74 65 70 20 31 33 2e 20 | ....S|tep 13. |
|00005470| 43 6c 6f 73 65 20 53 44 | 52 20 77 69 6e 64 6f 77 |Close SD|R window|
|00005480| 2c 20 79 6f 75 20 73 68 | 6f 75 6c 64 20 73 65 65 |, you sh|ould see|
|00005490| 20 74 68 65 20 6c 69 6e | 65 3a 0d 0a 0d 0a 20 20 | the lin|e:.... |
|000054a0| 2a 20 52 65 66 65 72 65 | 6e 63 65 64 20 62 79 20 |* Refere|nced by |
|000054b0| 61 20 28 55 29 6e 63 6f | 6e 64 69 74 69 6f 6e 61 |a (U)nco|nditiona|
|000054c0| 6c 20 6f 72 20 28 43 29 | 6f 6e 64 69 74 69 6f 6e |l or (C)|ondition|
|000054d0| 61 6c 20 4a 75 6d 70 20 | 61 74 20 41 64 64 72 65 |al Jump |at Addre|
|000054e0| 73 73 3a 0d 0a 20 20 7c | 3a 30 30 34 33 46 45 33 |ss:.. ||:0043FE3|
|000054f0| 34 28 43 29 0d 0a 20 20 | 7c 0d 0a 20 20 3a 30 30 |4(C).. ||.. :00|
|00005500| 34 33 46 46 31 42 20 36 | 41 30 30 20 20 20 20 20 |43FF1B 6|A00 |
|00005510| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 70 | | p|
|00005520| 75 73 68 20 30 30 30 30 | 30 30 30 30 0d 0a 20 20 |ush 0000|0000.. |
|00005530| 3a 30 30 34 33 46 46 31 | 44 20 36 36 38 42 30 44 |:0043FF1|D 668B0D|
|00005540| 45 34 46 46 34 33 30 30 | 20 20 20 20 20 20 20 20 |E4FF4300| |
|00005550| 20 20 6d 6f 76 20 63 78 | 2c 20 77 6f 72 64 20 70 | mov cx|, word p|
|00005560| 74 72 20 5b 30 30 34 33 | 46 46 45 34 5d 0d 0a 20 |tr [0043|FFE4].. |
|00005570| 20 3a 30 30 34 33 46 46 | 32 34 20 33 33 44 32 20 | :0043FF|24 33D2 |
|00005580| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00005590| 20 20 20 78 6f 72 20 65 | 64 78 2c 20 65 64 78 0d | xor e|dx, edx.|
|000055a0| 0a 0d 0a 20 20 2a 20 50 | 6f 73 73 69 62 6c 65 20 |... * P|ossible |
|000055b0| 53 74 72 69 6e 67 44 61 | 74 61 20 52 65 66 20 66 |StringDa|ta Ref f|
|000055c0| 72 6f 6d 20 43 6f 64 65 | 20 4f 62 6a 20 2d 3e 22 |rom Code| Obj ->"|
|000055d0| 53 6f 72 72 79 2c 20 69 | 6e 76 61 6c 69 64 20 72 |Sorry, i|nvalid r|
|000055e0| 65 67 69 73 74 72 61 74 | 69 6f 6e 20 63 6f 64 65 |egistrat|ion code|
|000055f0| 2e 22 0d 0a 0d 0a 20 20 | 20 20 20 20 20 20 20 44 |.".... | D|
|00005600| 6f 20 79 6f 75 20 73 65 | 65 20 61 62 6f 76 65 20 |o you se|e above |
|00005610| 74 68 61 74 20 52 65 66 | 65 72 65 6e 63 65 64 20 |that Ref|erenced |
|00005620| 4a 75 6d 70 20 61 74 20 | 41 64 64 72 65 73 73 3f |Jump at |Address?|
|00005630| 20 3a 20 30 30 34 33 46 | 45 33 34 28 43 29 20 0d | : 0043F|E34(C) .|
|00005640| 0a 20 20 20 20 20 20 20 | 20 20 4e 6f 77 20 70 72 |. | Now pr|
|00005650| 65 73 73 20 50 67 55 70 | 20 6b 65 79 20 32 20 6f |ess PgUp| key 2 o|
|00005660| 72 20 33 20 74 69 6d 65 | 73 20 74 69 6c 6c 20 79 |r 3 time|s till y|
|00005670| 6f 75 20 73 65 65 3a 0d | 0a 0d 0a 20 20 3a 30 30 |ou see:.|... :00|
|00005680| 34 33 46 45 33 34 20 30 | 46 38 35 45 31 30 30 30 |43FE34 0|F85E1000|
|00005690| 30 30 30 20 20 20 20 20 | 20 20 20 20 20 20 20 6a |000 | j|
|000056a0| 6e 65 20 30 30 34 33 46 | 46 31 42 0d 0a 0d 0a 20 |ne 0043F|F1B.... |
|000056b0| 20 2a 20 50 6f 73 73 69 | 62 6c 65 20 53 74 72 69 | * Possi|ble Stri|
|000056c0| 6e 67 44 61 74 61 20 52 | 65 66 20 66 72 6f 6d 20 |ngData R|ef from |
|000056d0| 43 6f 64 65 20 4f 62 6a | 20 2d 3e 22 53 6f 66 74 |Code Obj| ->"Soft|
|000056e0| 77 61 72 65 5c 53 70 61 | 65 64 65 72 22 0d 0a 0d |ware\Spa|eder"...|
|000056f0| 0a 20 20 3a 30 30 34 33 | 46 45 33 41 20 38 42 30 |. :0043|FE3A 8B0|
|00005700| 44 44 43 31 39 34 34 30 | 30 20 20 20 20 20 20 20 |DDC19440|0 |
|00005710| 20 20 20 20 20 6d 6f 76 | 20 65 63 78 2c 20 64 77 | mov| ecx, dw|
|00005720| 6f 72 64 20 70 74 72 20 | 5b 30 30 34 34 31 39 44 |ord ptr |[004419D|
|00005730| 43 5d 0d 0a 0d 0a 53 74 | 65 70 20 31 34 2e 20 4c |C]....St|ep 14. L|
|00005740| 6f 6f 6b 20 61 74 20 30 | 30 34 33 46 45 33 34 20 |ook at 0|043FE34 |
|00005750| 61 64 64 72 65 73 73 2c | 20 77 65 20 6b 6e 6f 77 |address,| we know|
|00005760| 20 74 68 61 74 20 69 74 | 20 63 6f 6d 70 61 72 65 | that it| compare|
|00005770| 73 20 61 67 61 69 6e 20 | 62 65 66 6f 72 65 20 61 |s again |before a|
|00005780| 64 64 69 6e 67 0d 0a 20 | 20 20 20 20 20 20 20 20 |dding.. | |
|00005790| 61 20 6e 65 77 20 72 65 | 67 69 73 74 72 61 74 69 |a new re|gistrati|
|000057a0| 6f 6e 2f 64 61 74 61 20 | 74 6f 20 79 6f 75 72 20 |on/data |to your |
|000057b0| 72 65 67 69 73 74 72 79 | 2e 20 4e 6f 77 20 6c 65 |registry|. Now le|
|000057c0| 74 27 73 20 74 72 79 2e | 0d 0a 20 20 20 20 20 20 |t's try.|.. |
|000057d0| 20 20 20 4d 61 6b 65 20 | 73 75 72 65 20 74 68 65 | Make |sure the|
|000057e0| 20 67 72 65 65 6e 20 63 | 6f 6c 6f 72 20 62 61 72 | green c|olor bar|
|000057f0| 20 69 73 20 6f 6e 20 30 | 30 34 33 46 45 33 34 20 | is on 0|043FE34 |
|00005800| 30 46 38 35 45 31 30 30 | 30 30 30 30 20 6a 6e 65 |0F85E100|0000 jne|
|00005810| 20 30 30 34 33 46 46 31 | 42 0d 0a 20 20 20 20 20 | 0043FF1|B.. |
|00005820| 20 20 20 20 61 6e 64 20 | 79 6f 75 20 73 68 6f 75 | and |you shou|
|00005830| 6c 64 20 73 65 65 20 4f | 66 66 73 65 74 20 61 64 |ld see O|ffset ad|
|00005840| 64 72 65 73 73 20 62 65 | 6c 6f 77 20 6f 6e 20 74 |dress be|low on t|
|00005850| 68 65 20 73 63 72 65 65 | 6e 20 6c 69 6b 65 20 40 |he scree|n like @|
|00005860| 4f 66 66 73 65 74 0d 0a | 20 20 20 20 20 20 20 20 |Offset..| |
|00005870| 20 30 30 30 33 46 32 33 | 34 68 2e 20 49 74 27 73 | 0003F23|4h. It's|
|00005880| 20 77 68 65 72 65 20 79 | 6f 75 20 63 61 6e 20 70 | where y|ou can p|
|00005890| 61 74 63 68 20 69 74 20 | 69 6e 20 54 52 41 59 43 |atch it |in TRAYC|
|000058a0| 41 4c 2e 45 58 45 2e 0d | 0a 0d 0a 53 74 65 70 20 |AL.EXE..|...Step |
|000058b0| 31 35 2e 20 47 6f 20 62 | 61 63 6b 20 74 6f 20 57 |15. Go b|ack to W|
|000058c0| 43 2c 20 72 75 6e 20 48 | 49 45 57 20 54 52 41 59 |C, run H|IEW TRAY|
|000058d0| 43 41 4c 2e 45 58 45 2c | 20 70 72 65 73 73 20 46 |CAL.EXE,| press F|
|000058e0| 34 20 74 6f 20 73 65 6c | 65 63 74 20 44 65 63 6f |4 to sel|ect Deco|
|000058f0| 64 65 20 6d 6f 64 65 0d | 0a 20 20 20 20 20 20 20 |de mode.|. |
|00005900| 20 20 28 41 53 4d 29 2c | 20 70 72 65 73 73 20 46 | (ASM),| press F|
|00005910| 35 20 61 6e 64 20 65 6e | 74 65 72 20 33 46 32 33 |5 and en|ter 3F23|
|00005920| 34 2e 20 59 6f 75 20 73 | 68 6f 75 6c 64 20 73 65 |4. You s|hould se|
|00005930| 65 20 6c 69 6b 65 3a 0d | 0a 0d 0a 20 20 2e 30 30 |e like:.|... .00|
|00005940| 30 33 46 45 33 34 3a 20 | 30 46 38 35 45 31 30 30 |03FE34: |0F85E100|
|00005950| 30 30 30 30 20 20 20 20 | 20 20 20 20 20 20 20 20 |0000 | |
|00005960| 20 20 20 20 20 6a 6e 65 | 20 20 20 2e 30 30 30 30 | jne| .0000|
|00005970| 33 46 46 31 42 20 20 20 | 2d 2d 2d 2d 2d 2d 2d 2d |3FF1B |--------|
|00005980| 2d 2d 20 28 31 29 0d 0a | 20 20 2e 30 30 30 33 46 |-- (1)..| .0003F|
|00005990| 45 33 41 3a 20 38 42 30 | 44 44 43 31 39 34 34 30 |E3A: 8B0|DDC19440|
|000059a0| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0 | |
|000059b0| 20 20 6d 6f 76 20 20 20 | 20 65 63 78 2c 5b 30 30 | mov | ecx,[00|
|000059c0| 30 34 34 31 39 44 43 5d | 0d 0a 20 20 2e 30 30 30 |04419DC]|.. .000|
|000059d0| 33 46 45 34 30 3a 20 42 | 32 30 31 20 20 20 20 20 |3FE40: B|201 |
|000059e0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000059f0| 20 20 20 20 6d 6f 76 20 | 20 20 20 64 6c 2c 30 30 | mov | dl,00|
|00005a00| 31 0d 0a 20 20 2e 30 30 | 30 33 46 45 34 32 3a 20 |1.. .00|03FE42: |
|00005a10| 41 31 32 38 44 38 34 33 | 30 30 20 20 20 20 20 20 |A128D843|00 |
|00005a20| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 6d 6f 76 | | mov|
|00005a30| 20 20 20 20 65 61 78 2c | 5b 30 30 30 34 33 44 38 | eax,|[00043D8|
|00005a40| 32 38 5d 0d 0a 0d 0a 53 | 74 65 70 20 31 36 2e 20 |28]....S|tep 16. |
|00005a50| 54 68 61 74 27 73 20 77 | 68 65 72 65 20 79 6f 75 |That's w|here you|
|00005a60| 20 63 61 6e 20 63 68 61 | 6e 67 65 20 74 68 65 20 | can cha|nge the |
|00005a70| 62 79 74 65 73 2c 20 70 | 72 65 73 73 20 46 33 2c |bytes, p|ress F3,|
|00005a80| 20 65 6e 74 65 72 20 30 | 46 38 34 2c 20 70 72 65 | enter 0|F84, pre|
|00005a90| 73 73 20 46 39 0d 0a 20 | 20 20 20 20 20 20 20 20 |ss F9.. | |
|00005aa0| 74 6f 20 75 70 64 61 74 | 65 20 54 52 41 59 43 41 |to updat|e TRAYCA|
|00005ab0| 4c 2e 45 58 45 2e 20 45 | 78 69 74 20 48 49 45 57 |L.EXE. E|xit HIEW|
|00005ac0| 2e 0d 0a 0d 0a 53 74 65 | 70 20 31 37 2e 20 52 75 |.....Ste|p 17. Ru|
|00005ad0| 6e 20 54 52 41 59 43 41 | 4c 2e 45 58 45 2c 20 64 |n TRAYCA|L.EXE, d|
|00005ae0| 6f 65 73 20 69 74 20 77 | 6f 72 6b 3f 20 4b 65 77 |oes it w|ork? Kew|
|00005af0| 6c 2c 20 79 6f 75 27 76 | 65 20 72 65 67 69 73 74 |l, you'v|e regist|
|00005b00| 65 72 65 64 20 69 74 21 | 21 0d 0a 0d 0a 0d 0a 50 |ered it!|!......P|
|00005b10| 41 52 54 20 34 3a 20 57 | 68 79 20 49 20 63 6f 70 |ART 4: W|hy I cop|
|00005b20| 79 20 2a 2e 45 58 45 20 | 74 6f 20 2a 2e 57 33 32 |y *.EXE |to *.W32|
|00005b30| 20 66 69 6c 65 73 0d 0a | 0d 0a 49 20 6b 6e 6f 77 | files..|..I know|
|00005b40| 20 73 6f 6d 65 20 70 65 | 6f 70 6c 65 20 69 73 20 | some pe|ople is |
|00005b50| 77 6f 6e 64 65 72 69 6e | 67 20 77 68 79 20 49 20 |wonderin|g why I |
|00005b60| 63 6f 70 79 20 2a 2e 45 | 58 45 20 74 6f 20 2a 2e |copy *.E|XE to *.|
|00005b70| 57 33 32 20 66 69 6c 65 | 73 2e 20 45 61 73 69 6c |W32 file|s. Easil|
|00005b80| 79 2e 2e 0d 0a 49 20 75 | 73 65 20 2a 2e 45 58 58 |y....I u|se *.EXX|
|00005b90| 20 77 68 65 6e 20 73 6f | 6d 65 74 69 6d 65 73 20 | when so|metimes |
|00005ba0| 74 68 65 20 70 72 6f 67 | 72 61 6d 20 77 6f 6e 27 |the prog|ram won'|
|00005bb0| 74 20 77 6f 72 6b 2c 20 | 74 68 65 6e 20 49 20 63 |t work, |then I c|
|00005bc0| 6f 75 6c 64 20 63 6f 70 | 79 20 2a 2e 45 58 58 20 |ould cop|y *.EXX |
|00005bd0| 62 61 63 6b 0d 0a 74 6f | 20 2a 2e 45 58 45 20 66 |back..to| *.EXE f|
|00005be0| 69 6c 65 73 2e 20 41 6e | 64 20 77 68 65 6e 20 2a |iles. An|d when *|
|00005bf0| 2e 57 33 32 20 49 20 63 | 61 6e 27 74 20 70 61 74 |.W32 I c|an't pat|
|00005c00| 63 68 20 2a 2e 45 58 45 | 20 66 69 6c 65 73 20 77 |ch *.EXE| files w|
|00005c10| 68 65 6e 20 69 74 27 73 | 20 73 74 69 6c 6c 20 75 |hen it's| still u|
|00005c20| 73 65 64 0d 0a 62 79 20 | 57 33 32 44 61 73 6d 2c |sed..by |W32Dasm,|
|00005c30| 20 74 68 65 72 65 66 6f | 72 65 20 57 33 32 44 61 | therefo|re W32Da|
|00005c40| 73 6d 20 75 73 65 73 20 | 6e 6f 77 20 2a 2e 57 33 |sm uses |now *.W3|
|00005c50| 32 20 66 69 6c 65 73 2e | 2e 20 4e 6f 77 20 74 65 |2 files.|. Now te|
|00005c60| 6c 6c 20 6d 65 20 68 6f | 77 20 49 20 63 61 6e 20 |ll me ho|w I can |
|00005c70| 64 6f 0d 0a 74 68 61 74 | 20 74 72 69 63 6b 21 20 |do..that| trick! |
|00005c80| 3a 2d 29 20 41 6c 73 6f | 2c 20 72 65 6d 65 6d 62 |:-) Also|, rememb|
|00005c90| 65 72 20 74 6f 20 73 61 | 76 65 20 64 69 73 61 73 |er to sa|ve disas|
|00005ca0| 73 65 6d 62 6c 65 64 20 | 66 69 6c 65 73 20 62 65 |sembled |files be|
|00005cb0| 66 6f 72 65 20 65 78 69 | 74 69 6e 67 0d 0a 57 33 |fore exi|ting..W3|
|00005cc0| 32 44 61 73 6d 2c 20 6e | 65 78 74 20 74 69 6d 65 |2Dasm, n|ext time|
|00005cd0| 20 79 6f 75 20 64 6f 6e | 27 74 20 6e 65 65 64 20 | you don|'t need |
|00005ce0| 74 6f 20 64 69 73 61 73 | 73 65 6d 62 6c 65 20 70 |to disas|semble p|
|00005cf0| 72 6f 67 72 61 6d 73 20 | 61 67 61 69 6e 2e 20 59 |rograms |again. Y|
|00005d00| 6f 75 20 63 61 6e 20 6f | 70 65 6e 0d 0a 73 61 76 |ou can o|pen..sav|
|00005d10| 65 64 20 66 69 6c 65 73 | 20 62 79 20 63 6c 69 63 |ed files| by clic|
|00005d20| 6b 69 6e 67 20 6f 6e 20 | 4f 70 65 6e 20 50 72 6f |king on |Open Pro|
|00005d30| 6a 65 63 74 20 46 69 6c | 65 73 21 0d 0a 0d 0a 0d |ject Fil|es!.....|
|00005d40| 0a 50 41 52 54 20 35 3a | 20 41 53 4d 20 53 6f 75 |.PART 5:| ASM Sou|
|00005d50| 72 63 65 20 43 6f 64 65 | 20 66 6f 72 20 61 20 50 |rce Code| for a P|
|00005d60| 61 74 63 68 65 72 20 62 | 79 20 4e 6f 70 2f 50 43 |atcher b|y Nop/PC|
|00005d70| 20 27 39 37 0d 0a 0d 0a | 2d 2d 2d 2d 2d 2d 2d 2d | '97....|--------|
|00005d80| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00005d90| 2d 2d 2d 2d 2d 2d 2d 3c | 63 75 74 20 68 65 72 65 |-------<|cut here|
|00005da0| 3e 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |>-------|--------|
|00005db0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00005dc0| 2d 2d 2d 2d 2d 2d 0d 0a | 0d 0a 3b 5f 5f 5f 5f 5f |------..|..;_____|
|00005dd0| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005de0| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005df0| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005e00| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 0d 0a 3b 0d 0a 3b |________|__..;..;|
|00005e10| 20 50 61 74 63 68 65 72 | 20 62 79 20 4e 6f 70 20 | Patcher| by Nop |
|00005e20| 5b 50 63 5d 20 2d 20 53 | 6f 75 72 63 65 43 6f 64 |[Pc] - S|ourceCod|
|00005e30| 65 20 31 30 30 25 20 66 | 72 65 65 0d 0a 3b 0d 0a |e 100% f|ree..;..|
|00005e40| 3b 20 20 20 54 6f 20 75 | 73 65 20 77 69 74 68 20 |; To u|se with |
|00005e50| 41 38 36 3a 0d 0a 3b 20 | 20 20 20 20 20 20 41 38 |A86:..; | A8|
|00005e60| 36 20 43 72 6b 4e 6f 70 | 2e 61 73 6d 0d 0a 3b 0d |6 CrkNop|.asm..;.|
|00005e70| 0a 3b 20 20 20 54 6f 20 | 75 73 65 20 77 69 74 68 |.; To |use with|
|00005e80| 20 54 41 53 4d 3a 0d 0a | 3b 20 20 20 20 20 20 20 | TASM:..|; |
|00005e90| 74 61 73 6d 20 43 72 6b | 4e 6f 70 2e 61 73 6d 0d |tasm Crk|Nop.asm.|
|00005ea0| 0a 3b 20 20 20 20 20 20 | 20 74 6c 69 6e 6b 20 2f |.; | tlink /|
|00005eb0| 74 20 43 72 6b 4e 6f 70 | 2e 6f 62 6a 0d 0a 3b 0d |t CrkNop|.obj..;.|
|00005ec0| 0a 3b 20 47 72 65 65 74 | 7a 20 74 6f 20 61 6c 6c |.; Greet|z to all|
|00005ed0| 20 6d 65 6d 62 65 72 73 | 20 6f 66 20 74 68 65 20 | members| of the |
|00005ee0| 53 63 65 6e 65 0d 0a 3b | 5f 5f 5f 5f 5f 5f 5f 5f |Scene..;|________|
|00005ef0| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005f00| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005f10| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00005f20| 5f 5f 5f 5f 5f 5f 5f 0d | 0a 0d 0a 2e 4d 4f 44 45 |_______.|....MODE|
|00005f30| 4c 20 54 49 4e 59 0d 0a | 2e 43 4f 44 45 0d 0a 2e |L TINY..|.CODE...|
|00005f40| 32 38 36 0d 0a 4f 52 47 | 20 31 30 30 68 0d 0a 0d |286..ORG| 100h...|
|00005f50| 0a 0d 0a 73 74 61 72 74 | 3a 0d 0a 20 20 20 20 20 |...start|:.. |
|00005f60| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 20 | | mov |
|00005f70| 20 20 20 61 68 2c 20 39 | 20 20 20 20 20 20 20 20 | ah, 9| |
|00005f80| 20 20 20 20 20 20 20 3b | 20 fe 20 53 68 6f 77 20 | ;| . Show |
|00005f90| 54 69 74 6c 65 20 fe 20 | 20 20 20 20 20 20 20 20 |Title . | |
|00005fa0| 20 20 20 20 20 20 20 0d | 0a 20 20 20 20 20 20 20 | .|. |
|00005fb0| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 20 20 20 | | mov |
|00005fc0| 20 64 78 2c 20 6f 66 66 | 73 65 74 20 4d 61 69 6e | dx, off|set Main|
|00005fd0| 54 69 74 6c 65 0d 0a 09 | 09 69 6e 74 20 20 20 20 |Title...|.int |
|00005fe0| 20 32 31 68 0d 0a 0d 0a | 20 20 20 20 20 20 20 20 | 21h....| |
|00005ff0| 20 20 20 20 20 20 20 20 | 6d 6f 76 20 20 20 20 20 | |mov |
|00006000| 61 78 2c 20 33 44 30 32 | 68 20 20 20 20 20 20 20 |ax, 3D02|h |
|00006010| 20 20 20 20 3b 20 fe 20 | 4f 70 65 6e 20 46 69 6c | ; . |Open Fil|
|00006020| 65 20 fe 20 20 20 20 0d | 0a 20 20 20 20 20 20 20 |e . .|. |
|00006030| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 20 20 20 | | mov |
|00006040| 20 64 78 2c 20 6f 66 66 | 73 65 74 20 66 69 6c 65 | dx, off|set file|
|00006050| 6e 61 6d 65 0d 0a 09 09 | 69 6e 74 20 20 20 20 20 |name....|int |
|00006060| 32 31 68 0d 0a 09 09 6a | 6e 62 20 20 20 20 20 4f |21h....j|nb O|
|00006070| 6b 0d 0a 0d 0a 0d 0a 20 | 20 20 20 20 20 20 20 20 |k...... | |
|00006080| 20 20 20 20 20 20 20 6d | 6f 76 20 20 20 20 20 61 | m|ov a|
|00006090| 68 2c 20 39 20 20 20 20 | 20 20 20 20 20 20 20 20 |h, 9 | |
|000060a0| 20 20 20 3b 20 fe 20 46 | 69 6c 65 20 4e 6f 74 20 | ; . F|ile Not |
|000060b0| 46 6f 75 6e 64 20 fe 0d | 0a 20 20 20 20 20 20 20 |Found ..|. |
|000060c0| 20 20 20 20 20 20 20 20 | 20 6d 6f 76 20 20 20 20 | | mov |
|000060d0| 20 64 78 2c 20 6f 66 66 | 73 65 74 20 65 72 72 6f | dx, off|set erro|
|000060e0| 72 0d 0a 09 09 69 6e 74 | 20 20 20 20 20 32 31 68 |r....int| 21h|
|000060f0| 20 0d 0a 0d 0a 20 20 20 | 20 20 20 20 20 20 20 20 | .... | |
|00006100| 20 20 20 20 20 6d 6f 76 | 20 20 20 20 20 61 78 2c | mov| ax,|
|00006110| 20 34 43 30 31 68 20 20 | 20 20 20 20 20 20 20 20 | 4C01h | |
|00006120| 20 3b 20 fe 20 45 78 69 | 74 20 77 69 74 68 20 65 | ; . Exi|t with e|
|00006130| 72 72 6f 72 20 fe 0d 0a | 09 09 69 6e 74 20 20 20 |rror ...|..int |
|00006140| 20 20 32 31 68 0d 0a 3b | 5f 5f 5f 5f 5f 5f 5f 5f | 21h..;|________|
|00006150| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00006160| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00006170| 5f 5f 5f 5f 5f 5f 5f 5f | 5f 5f 5f 5f 5f 5f 5f 5f |________|________|
|00006180| 5f 5f 5f 5f 5f 5f 5f 0d | 0a 4f 6b 3a 0d 0a 0d 0a |_______.|.Ok:....|
|00006190| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000061a0| 6d 6f 76 20 20 20 20 20 | 62 78 2c 20 61 78 20 20 |mov |bx, ax |
|000061b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 3b 20 fe 20 | | ; . |
|000061c0| 4d 6f 76 65 20 70 6f 69 | 6e 74 65 72 20 fe 0d 0a |Move poi|nter ...|
|000061d0| 09 20 20 20 20 20 20 20 | 0d 0a 20 20 20 20 20 20 |. |.. |
|000061e0| 20 20 20 20 20 20 20 20 | 20 20 6d 6f 76 20 20 20 | | mov |
|000061f0| 20 20 61 78 2c 20 34 32 | 30 30 68 0d 0a 20 20 20 | ax, 42|00h.. |
|00006200| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 6d 6f 76 | | mov|
|00006210| 20 20 20 20 20 63 78 2c | 20 30 20 20 20 20 20 20 | cx,| 0 |
|00006220| 20 20 20 20 20 20 3b 20 | 73 65 67 6d 65 6e 74 20 | ; |segment |
|00006230| 0d 0a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |.. | |
|00006240| 20 20 6d 6f 76 20 20 20 | 20 20 64 78 2c 20 35 36 | mov | dx, 56|
|00006250| 35 20 20 20 20 20 20 20 | 20 20 20 3b 20 6f 66 66 |5 | ; off|
|00006260| 73 65 74 0d 0a 20 20 20 | 20 20 20 20 20 20 20 20 |set.. | |
|00006270| 20 20 20 20 20 69 6e 74 | 20 20 20 20 20 32 31 68 | int| 21h|
|00006280| 20 20 0d 0a 0d 0a 20 20 | 20 20 20 20 20 20 20 20 | .... | |
|00006290| 20 20 20 20 20 20 6d 6f | 76 20 20 20 20 20 61 78 | mo|v ax|
|000062a0| 2c 20 34 30 30 30 68 20 | 20 20 20 20 20 20 20 20 |, 4000h | |
|000062b0| 20 20 3b 20 fe 20 57 72 | 69 74 65 20 76 61 6c 75 | ; . Wr|ite valu|
|000062c0| 65 73 20 fe 0d 0a 20 20 | 20 20 20 20 20 20 20 20 |es ... | |
|000062d0| 20 20 20 20 20 20 6d 6f | 76 20 20 20 20 20 63 78 | mo|v cx|
|000062e0| 2c 20 31 20 20 20 20 20 | 20 20 20 20 20 20 20 3b |, 1 | ;|
|000062f0| 20 6e 75 6d 62 65 72 20 | 6f 66 20 62 79 74 65 73 | number |of bytes|
|00006300| 20 74 6f 20 77 72 69 74 | 65 0d 0a 20 20 20 20 20 | to writ|e.. |
|00006310| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 20 | | mov |
|00006320| 20 20 20 64 78 2c 20 6f | 66 66 73 65 74 20 42 79 | dx, o|ffset By|
|00006330| 74 65 73 54 6f 57 72 69 | 74 65 0d 0a 20 20 20 20 |tesToWri|te.. |
|00006340| 20 20 20 20 20 20 20 20 | 20 20 20 20 69 6e 74 20 | | int |
|00006350| 20 20 20 20 32 31 68 0d | 0a 0d 0a 20 20 20 20 20 | 21h.|... |
|00006360| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 20 | | mov |
|00006370| 20 20 20 61 78 2c 20 33 | 45 30 30 68 20 20 20 20 | ax, 3|E00h |
|00006380| 20 20 20 20 20 20 20 3b | 20 fe 20 43 6c 6f 73 65 | ;| . Close|
|00006390| 20 66 69 6c 65 20 fe 0d | 0a 20 20 20 20 20 20 20 | file ..|. |
|000063a0| 20 20 20 20 20 20 20 20 | 20 69 6e 74 20 20 20 20 | | int |
|000063b0| 20 32 31 68 0d 0a 0d 0a | 0d 0a 20 20 20 20 20 20 | 21h....|.. |
|000063c0| 20 20 20 20 20 20 20 20 | 20 20 6d 6f 76 20 20 20 | | mov |
|000063d0| 20 20 61 68 2c 20 39 20 | 20 20 20 20 20 20 20 20 | ah, 9 | |
|000063e0| 20 20 20 20 20 20 3b 20 | fe 20 53 68 6f 77 20 6d | ; |. Show m|
|000063f0| 73 67 20 fe 0d 0a 20 20 | 20 20 20 20 20 20 20 20 |sg ... | |
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.
