Cracker Handbook 1 0 part 71 ppsx
Cracker Handbook 1.0 part 71 ppsx
...
01 0 01 1 10 01 1 0 01 1 1 01 1 1 01 0 1 01 1 1 10 01 01 1 0 01 0 1 01 1 01 1 10 0 01 0 00 00
01 0 0 01 0 0 01 1 1 01 0 1 01 1 1 10 01 0 01 0 00 00 01 0 01 1 10 01 1 01 0 00 01 1 00 0 01
01 1 1 01 0 0
4e 67 75 79 65 6e 20 44 75 79 20 4e 68 61 74
9 916 df4941fb94b7b956f7959f0ab15d ... ( :00 403 0 21 7 505
jne 00 403 028 ==> Sai, nhảy đến thông báo &qu...
Cracker Handbook 1.0 part 16 ppsx
... FE 01
Compare two been worth. Yew
they are equal, the integer been
worth 1 (int32) is pushed onto the
stack evaluation; otherwise 0
(int32) is pushed onto the stack
evaluation.
cgt FE 02 ... been worth
1 (int32) is pushed onto the stack
evaluation; otherwise 0 (int32) is
pushed onto the stack evaluation.
clt.un FE 05
Compare the unsigned gold
unordered been worth value1...
Cracker Handbook 1.0 part 21 ppsx
...
DOS=HIGH
FILES= 40
02 .2 Setup
=======
Cái này em đã nói nhìu rùi, bác nào chưa bít thì xem lại trong tut Window
Cracking Tutorial (http://www.reaonline.net/forum/showthread.php?t= 212 )
DS:SI____có ... Quote:
LODSB / LODSW
Cú pháp : LODSB / LODSW
Tác dụng : load 1 byte hoặc 1 word từ DS:SI và đặt nó vào AL (đối với LODSB)
hay vào AX (đối với LODSW)
Ví dụ : LODSW ... LET...
Cracker Handbook 1.0 part 25 ppsx
... thật
newbie cho Newbie tụi em học hỏi với. Mong các đại ca góp ý. Tha thiết khẩn cầu.
benina 29 / 10 /04
BÀI 6: FIND REAL SERIAL
Phần 3: Find Real Serial in “RECYCLE BIN”
Vài lời tâm sự cho ... tính toán. Dạng này nếu là newbie chúng ta chỉ
patch tại điểm so sánh là xong (hoặc patch AL =1 hay EAX =1 cuối hàm call như
hacnho đã làm ). Nếu patch mà khi vào lại vẫn bị báo reg , th...
Cracker Handbook 1.0 part 58 ppsx
... decreases CX on 1, and transfers the flow of the
program to the label given as operator if CX is different than 1.
It jumps if the sign is deactivated.
The jump is done if SF = 0.
JO ... different to 0.
Purpose: Conditional jump, and the state of the flags is taken into
account.
Syntax:
JS label
It jumps if the sign is on.
The jump is done if SF = 1.
4....
Cracker Handbook 1.0 part 62 ppsx
... with a 0 character.
The file created will contain the attributes defined on the CX register in
the following manner:
. . . . 0 0 0 Only reading
. . . . 0 0 1 Only writing
. . . . 0 1 0 Reading/Writing ... functions of the 10 h interruption.
Common functions of the 10 h interruption
02 H Function, select the cursor position
09 H Function, write attribute and c...
Cracker Handbook 1.0 part 65 ppsx
... which called
Adding Proc Near ; Declaration of the procedure
Mov Bx, 0 ; Content of the procedure
Mov B1, Ah
Mov Ah, 00
Add Bx, Ax
Ret ; Return directive
Add Endp ; End of procedure declaration ... is:
Position MACRO Row, Column
PUSH AX
PUSH BX
PUSH DX
MOV AH, 02 H
MOV DH, Row
MOV DL, Column
MOV BH, 0
INT 10 H
POP DX
POP BX
POP AX
ENDM
To use a macro it is only...
Cracker Handbook 1.0 part 69 ppsx
... ID =0 01 2 9 “Your lincese has expired…”
:00 408 30C 68 8 10 00 000 push 00 000 0 81
:00 408 311 8D8DE4FEFFFF lea ecx, dword ptr [ebp+FFFFFEE4]
:00 408 317 E873AD0 200 call 00 43 308 F
:00 408 31C 6A 10 push 00 000 01 0 ...
"Mode"=dword :00 000 0 01
"Menu"=dword :00 000 000
"Update"=dword :00 000 000
"MenuSet"=dword :00 000 000
&q...
Cracker Handbook 1.0 part 76 ppsx
...
:00 4C689A 0F84B 700 000 0 je 00 4C6957 < Cần crack, chú ý (1)
:00 4C68A0 C 605 52CA5 700 00 mov byte ptr [00 57CA52], 00
:00 4C68A7 BE28 305 800 mov esi, 00 58 302 8
:00 4C68AC BFF8C95 700 mov edi, 00 57C9F8
:00 4C68B1 ... String Resource ID= 01 9 11: "Registration"
|
:00 4C698E 687 707 000 0 push 00 000 777
:00 4C6993 E8D95DF6FF call 00 42C7 71
:00 4C...
Cracker Handbook 1.0 part 78 ppsx
... |
:00 49F6 90 68444B5 700 push 00 574B44
:00 49F695 50 push eax
:00 49F696 E86 805 0 600 call 00 4FFC03
:00 49F69B 83C40C add esp, 00 000 00C
:00 49F69E 8D4DF0 lea ecx, dword ptr [ebp - 10 ]
:00 49F6A1 E8699BFFFF ...
:00 4997DF 6 818 4B5 700 push 00 574B18
:00 4997E4 8BC8 mov ecx, eax
:00 4997E6 E8457C0 700 call 00 511 4 30
:00 4997EB 85C0 test eax, eax
:00 4997E...