708
« on: January 10, 2017, 01:08:26 pm »
lightspeed: look at the offset bar on the bottom of the image it shows both files as a comparison for you.
xor eax, eax will always set eax to zero , and 0 is what were looking for. 1 on - 0 off. Then drops to the next line. RETURN
The Return , drops the code execution to the following line that followed call itself (sub routine). ur off to the races.
You can get the same effect by using a PUSH on the stack .
Think of asm32, as when ur at a buffet (cafeteria) with the trays stacked on that spring loaded feeder. You just push or pull off the stack, same here. Ur just pushing/pulling 32 bit instructions of the stack. Or doing in this case a directed call. Goto line number XXXX and continue on down the instructions.
Plus's for ASM32: Because of the the lang, even if ur not up on the lang that ur looking at , you can see where the coder was going. Thats a BIG damn deal too.
Gives you sorta an overview on whats going on, then its just a matter of hunting.
vt .julie.dll
still looking for james and ashley
justy copy over the top of the original
Now keep in mind i do not support piracy and this was for Educational purposes only . On the use of a decompiler and what can be done in the rite hands.
Lightspeed: At the time i was learning to code (1980) the big thing was c++, But i just loved asm32, felt like it put me closer to the inner workings of the computer. Thus , raising the Bar on myself. Worthless ,really as a coding lang,but a handy PET to have. In case of emergency, Break Glass, Make a patch. lol
flawless victory
cyberjedi
PS lightspeed: My explanation was more detailed then normal. But u seem cool, so i took the time. Normally u get a grunt and a shrug, use/dont use who gives a ****** lol
Show Posts