Argoth
March 18th, 2002, 19:42
Hi all!
Ok, I'm working on a program called HistoryKill 2001 build 2001.3.9. I downloaded it from //download.cnet.com/downloads/0-3356727-100-5657559.html?tag=st.dl.10001-103-1.lst-7-1.5657559 Now I know that there is a registry key, which it checks, on:
HKEY_USERS\.DEFAULT\Software\Key
Bpx RegQueryValueExA should bring you to the correct point. (It's right there when SI pops up for the first time.) When you get to 01222662, I think there's an interesting compare there. It compares ESI (which holds the value we filled out in the regkey) to EDI, which is 01241FAC. Why I'm already stuck here is: No matter what I try, the jump after the compare is always jumping. Ofcourse I could just reverse this jump by reversing the s flag, but that's not my idea
I want to find the correct key.
I could use some hints,
Thanks in advance,
Argoth
Ok, I'm working on a program called HistoryKill 2001 build 2001.3.9. I downloaded it from //download.cnet.com/downloads/0-3356727-100-5657559.html?tag=st.dl.10001-103-1.lst-7-1.5657559 Now I know that there is a registry key, which it checks, on:
HKEY_USERS\.DEFAULT\Software\Key
Bpx RegQueryValueExA should bring you to the correct point. (It's right there when SI pops up for the first time.) When you get to 01222662, I think there's an interesting compare there. It compares ESI (which holds the value we filled out in the regkey) to EDI, which is 01241FAC. Why I'm already stuck here is: No matter what I try, the jump after the compare is always jumping. Ofcourse I could just reverse this jump by reversing the s flag, but that's not my idea
I want to find the correct key.I could use some hints,
Thanks in advance,
Argoth