Results 1 to 2 of 2

Thread: Help with 16bit crippled prog please?

  1. #1
    Scally
    Guest

    Help with 16bit crippled prog please?

    Hi folks,
    Could really use some guidance to point me in the right direction.
    h*tp://mvsoft.com/pub/eqs/eqs57dem.zip
    It's a 16bit app, which says its a demo but at least some of the code for the full version seems to be present. It creates an Ini file in c:\windows on installation but this never gets read on loading the demo (it is read in several functions such as 'about' and there is an annoying space for the serial)
    There are numerous dll's but only two are read on loading xwmba423.dll & xwmte423.dll.
    Save,print,cut & copy are menu disabled and there are limitations on the size of models the demo can produce.
    At first I tried to get back to the protection via the 'can't print...' nag but just keep getting lost in the code - the first couple of conditional jumps don't seem to make a difference. I also tried bpxing on enablemenuitem & enable window but no luck.

    Modifymenu is called on load from xwmba423.dll but again I kept getting lost in the code.
    I tried stepping thru from the ep for the best part of a day but them thar codewoods..

    Any help would be welcome
    Scally
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Scally
    Guest
    Still no further with this one but I did manage to get back to the print menu select from the 'can't print' dialogbox breaking initially on 'dialogboxparam'.
    The sequence of segments/files from the calls in the first part is:

    Dmas.exe Seg 1:1301
    Dmas.exe Seg 1:34c4
    Dmas.exe Seg 15:4baa
    Xwmba423 Seg 94:818
    Xwmba423 Seg 13:22e
    Xwmba423 Seg 94:830
    Dmas.exe Seg 15:4bca
    Xwmba423 Seg 87:07ac
    Xwmba423 Seg 11:0000
    Xwmba423 Seg 13:4b6
    Xwmba423 Seg 11:0011
    Xwmba423 Seg 87:07c9
    Dmas.exe Seg 15:4c1b
    Xwmba423 Seg 94:8e6
    Xwmba423 Seg 13:22e
    Xwmba423 Seg 94:8fe
    Dmas.exe Seg 15:4c29
    Dmas.exe Seg 1:34f1 etc.
    I've tried to compare the sequence with the disabled controls like this one with a couple of good ones but can't see it.
    Scally
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. unpacking windows 16bit dll
    By [yAtEs] in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: July 1st, 2002, 16:10
  2. crackme time-crippled
    By eDu in forum Malware Analysis and Unpacking Forum
    Replies: 0
    Last Post: December 26th, 2001, 07:49
  3. SI, VB and a 16bit DLL
    By JohnnyBoy in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: September 14th, 2001, 06:25
  4. how do unpack/dump a 16bit windows app?
    By n0de in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: May 27th, 2001, 19:21
  5. Help-running out of paper- Can anyone help with a 16bit prog. my brain cant get round?
    By Scally6 in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: February 3rd, 2001, 04:27

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •