Log in

View Full Version : i hate WALKTHROUGHS!!!!!!!!


STUNTBUM
September 12th, 2005, 02:58
OKAY im tryin to learn reverse engineering.......or just engineering at all at the minute....ive got win32dasm and hiew not perfect but oky to start with...or are they?? i must have read around 10 or 12 tutorials for stoppin a cd check on a game exe and they all say use soft ice....then proceed telling you what buttons to press (game specific) and what to change the values to then tell you to save an dexit all done no explanations........
this is not any help.. i would like some guidance please.......
i have learned to reconize 2 lines it appears as
kernel32 get volume info
kernel32 get drive type
so i know where to look at......but then there is things like eax....i guess from half arsed tuts that his is the value the cd produces i.e 3 corect cd 0 no cd.5 wrong cd
i would like to know what the functions of lines are ie :test (self explanotory)
mov = move?
add = add file? add commnd?
nop = no operation
thats is about all i know, i have never seen coding before and it goes straight over my head any help at all is greatly appreciated
i wont ask for tools but if nyone feel generous msn addy is on profile
thanks in advance

STUNTBUM
September 12th, 2005, 03:36
just looking at the tuts on crackz and followed the mech warrior3 crack......
the (hope this is right) offset numbers (the ones you type into hiew to go to a certain line) where different to mine and the tut said JNZ as an operation and mine said JNE is this because of game versions or becuase or different software used to read it??
anyway got through it and started the game with no cd
but could some one help with worms mayhem it is completely diferent layout
also a list of ops for hiew would be cool
ie JMP = jump or what ever they mean

phjux
September 12th, 2005, 04:12
You'll get the hang of it, if you stick to learning.

naides
September 12th, 2005, 06:07
Look in Protools and Exetools down. I remember someone wrote a little helper app: A popup window with most of the opcodes with a short explanation of their meaining

blabberer
September 12th, 2005, 09:35
by far the best online help i constantly use for some weird opcodes is this link

http://www.clipx.net/ng/iapx86/
for example jne and jnz

would show
JNE, JNZ Not Equal, Not Zero ZF=0

http://www.clipx.net/ng/iapx86/ng10482.php

apart from that if you have masm32 installed
hutch provides an opcode.hlp along with it (look in masm32 dir)
it provides an explanation of all the opcodes

as far as hiew and win32dasm i consider them a little bit too old
i prefer ollydbg (it can act as a disassembler ,debugger ,and hexeditor all bundled into one if you grow with it

if you really think you need a disassembler (consider getting idafree version 4.3) available officially in thier site
its pretty awesome and more than sufficient for x86 pes

another of the free avenues is windbg available from microsoft
if you program and want to go along debugging your own source and look at how it works (i think thats the best method to start off )
it does the work pretty good in my opinion

well a couple of easy asm crackmes (search crackmes.de) should get you upto speed

STUNTBUM
September 12th, 2005, 11:34
thanx for the help everyone i think i know where im headin now......ill post agin next time im stuck thx

STUNTBUM
September 12th, 2005, 11:41
just a quick thought.......would anyone be intrestedlooking at an exe for <name deleted> for me?? i have tried to fathom it but i do not understand it and have never come across the way it is wriiten before.....i tried to lift the cd protecion (becaus eits the first thing ive learned) but there is quite afew references to it.....I DOTN WANT IT DOING FOR ME I WANT TO KNOW HOW TO DO IT....for example which lines to alter and why.how did you work out it was the correct line etc etc
would be ever so grateful and buy you a pint or 2 if i saw you lol
let me know if anyone is willing and ill host or email the exe.

Kayaker
September 12th, 2005, 11:56
Quote:
[Originally Posted by STUNTBUM].would anyone be intrestedlooking at an exe for <name deleted> for me??

Hi

No, No, No. Don't ever ask this. If you had spent any time trying to learn by browsing this site and understanding what it's all about, you would have known NOT to make such a request. No biggy, but this thread is closed.