Exetools  

Go Back   Exetools > General > General Discussion
Reload this Page Some guys can explain for me?
Register Forum Rules FAQ Calendar Mark Forums Read

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-23-2014, 12:43
poorit2011 poorit2011 is offline
Friend
  
Join Date: Sep 2011
Posts: 120
Rept. Given: 167
Rept. Rcvd 21 Times in 17 Posts
Thanks Given: 15
Thanks Rcvd at 4 Times in 4 Posts
poorit2011 Reputation: 21
Some guys can explain for me?
Dear All...

Im compared the patched one with origin one and found that they are diffrent with codes below... Can guys explain for me what mean are in these codes?

088D: 0800 or [bx+si], al
088F: 75EC jne 087D
0891: F9 stc
0892: 0A49B3 or cl, [bx+di-4D]
0895: EC in al, dx
0896: 5E pop si
0897: 0400 add al, 00
0899: 305F15 xor [bx+15], bl
089C: 54 push sp
Reply With Quote
  #2  
Old 10-23-2014, 17:38
Syoma Syoma is offline
reverse engineer
  
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 78 Times in 51 Posts
Syoma Reputation: 77
it is trash
Reply With Quote
  #3  
Old 10-23-2014, 18:41
Git's Avatar
Git Git is offline
Old Git
  
Join Date: Mar 2002
Location: Torino
Posts: 1,115
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 108
Thanks Rcvd at 216 Times in 124 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
Very unusual to see an IN command unless it's a kernel driver, but then it's 16 bit code. Also, the rest of the code looks very odd. Are you sure you're disassembling in the right mode?. If so, I would suspect that this section is data, not code. Can you post disassembly of both normal and patched code, and a bit more of each above and below what you have posted above, say 0860 to 08C0.

Git
Reply With Quote
  #4  
Old 10-24-2014, 11:26
fmtx fmtx is offline
Friend
  
Join Date: Jun 2014
Posts: 7
Rept. Given: 2
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
fmtx Reputation: 0
It is data, could be encryption keys, serial seeds, or anything.
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Do you guys think this noobie bought some good starter material? leetone General Discussion 13 05-26-2014 17:29
For you guys&gals who dont speak Spanish hobferret General Discussion 2 07-28-2005 23:18
Where do you guys send your cracks? Nilrem General Discussion 10 01-07-2004 07:13
This is the only way guys XCURSiON General Discussion 0 08-12-2002 06:14


All times are GMT +8. The time now is 14:28.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )