=============================================================== INTRODUCTION =============================================================== First, let me thank DREAD and The Immortal Descendants for their wonderful idea of the reverseme and the Reverse EngineerZINE. It will certainly open a new path to the fellow reversers out there. =============================================================== TOOLS NEEDED =============================================================== HIEW (or any other hex editor) Volatility's essay on adding scrollbar functionality to douby's ReverseMe1 =============================================================== ManKind's addition to Volatility's essay on adding scrollbar functionality to douby's ReverseMe1 =============================================================== You MUST read Volatility's wonderful essay first before reading this. xxxx:00401182 68C4008050 PUSH 508000C4 Take note of the above line of codes. Volatility patched the original opcode(68C4008050) to 68C400A050 and no doubt, he has completed the scrollbar challenge successfully as required by douby as follow, take note of the 'a'(means one) in the below sentence: - Add a scrollbar to the editbox But then, reversers are taught to always find a better way to do something(or reverse something), for a better result. That's what I do, I tried to patch the above line of code into the following: 68C400B050 Its different from the original and Volatility's opcode. It produces a very nice result. There are two scrollbars now, horizontal and vertical ones. Hope you get my points, this addition can help to better reverse the reverseme and can improve the functionality of this quite nice text editor(the reverseme). ManKind (mankind001@bigfoot.com) =============================================================== End of ManKind's Addition =============================================================== =============================================================== Adding other un-challenged feature to the reverseme(the child window) =============================================================== The reverseme can still be customised in many ways by modifying the opcode at address 00401182(well, at least, the child window) but none of them will be really useful other than those scrollbars. Below are some(I mean some) possible and useful modifications with its conditions: 68C4001050 - a horizontal scrollbar 68C4003050 - both horizontal and vertical scrollbars 68C400C050 - the child window can be moved, useful if there there is two or more child windows(but we need another function like "New") 68C400C850-68C400CF50 - provide some controls on the child window like those found in Microsoft Word's child window 68C400D050 - moveable child window & a horizontal scrollbar 68C400D850-68C400DF50 - same as 68C400D050 but with some controls on the child window 68C400E050 - moveable child window & a vertical scrollbar 68C400E850-68C400EF50 - same as 68C400E050 but with some controls on the child window 68C400F050 - moveable child window, with both horizontal and vertical scrollbars 68C400F850-68C400FF50 - same as 68C400F050 but with some controls on the child window ManKind =============================================================== End of adding unchallenged feature ===============================================================