Results 1 to 4 of 4

Thread: Aspr stolen byte stubs

  1. #1
    sonkite
    Guest

    Aspr stolen byte stubs

    Code:
    ==== Microsoft Visual C++ 6.0 ====
    
    55               PUSH EBP
    8BEC             MOV EBP,ESP
    6AFF             PUSH -1
    6800000000       PUSH 00000000			; needs updating
    6800000000       PUSH 00000000			; needs updating
    64A100000000     MOV EAX,DWORD PTR FS:[0]
    50               PUSH EAX
    64892500000000   MOV DWORD PTR FS:[0],ESP
    83EC58           SUB ESP,58
    53               PUSH EBX
    56               PUSH ESI
    57               PUSH EDI
    8965E8           MOV DWORD PTR [EBP-18],ESP
    
    558BEC6AFF6800000000680000000064A10000
    0000506489250000000083EC585356578965E8
    
    ==================================
    
    
    ==== Microsoft Visual C++ 7.0 ====
    
    6A60             PUSH 60
    6800000000       PUSH 00000000			; needs updating
    
    6A606800000000
    
    ==================================
    
    
    ==== Borland Delphi ==============
    
    55               PUSH EBP
    8BEC             MOV EBP,ESP
    83C4F4           ADD ESP,-0C
    B800000000       MOV EAX,00000000		; needs updating
    
    558BEC83C4F4B800000000
    
    55               PUSH EBP
    8BEC             MOV EBP,ESP
    83EC10           SUB ESP,10
    B800000000       MOV EAX,00000000		; needs updating
    
    558BEC83EC10B800000000
    
    55               PUSH EBP 
    8BEC             MOV EBP,ESP 
    83C4F4           ADD ESP,-0C 
    53               PUSH EBX 
    B800000000       MOV EAX,00000000		; needs updating
    
    558BEC83C4F453B800000000
    
    55               PUSH EBP
    8BEC             MOV EBP,ESP
    83C4F0           ADD ESP,-10
    53               PUSH EBX
    B800000000       MOV EAX,00000000		; needs updating
    
    558BEC83C4F053B800000000
    
    ==================================
    These are all that i have seen so far, i hope these values are correct. Would be good if anyone who finds something wrong here please tell me.
    Last edited by sonkite; February 15th, 2004 at 12:50.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Greetingz folks
    Good to see old faces around still... Some are missing but well.. tt is life :/
    Kayaker not happy when wet anymore ? Me been busy kayaking in the sea hence no time for RE ...
    Been ages since i am here... it is amazing how Aspr n Armadillo still generates so much attentions... what versions are they on now and any new features since?

  3. #3
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    It's nice to see your old face too crUsAdEr, welcome back.

  4. #4
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,079
    Blog Entries
    5
    Quote Originally Posted by crUsAdEr
    Kayaker not happy when wet anymore ? Me been busy kayaking in the sea hence no time for RE
    OK, now I'm totally jealous!! Nice to see you around again crUsAdEr, stick around for a while. That's not too bad a tradeoff though y'know - sea kayaking for RE. That would definitely make me Happy when Wet again...

Similar Threads

  1. LINK: Pseudo unpacking stubs
    By Kayaker in forum Advanced Reversing and Programming
    Replies: 35
    Last Post: July 17th, 2006, 02:24
  2. 1 byte puzzle
    By evaluator in forum Mini Project Area
    Replies: 57
    Last Post: March 29th, 2004, 06:45
  3. damaged stolen bytes ??
    By johndoe1 in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: March 14th, 2004, 15:02
  4. IDA v4.15 leaked / stolen.
    By CrackZ in forum Tools of Our Trade (TOT) Messageboard
    Replies: 41
    Last Post: September 21st, 2002, 03:50
  5. IDA v4.17 leaked / stolen.
    By Snatch in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: December 12th, 2001, 23:52

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •