|guidelines | beginners | tools | softice | ollydbg | w32dasm | visual basic | unpacking | final notes|
Well, there is a good zip file to start with. Read it carefully: Tornado's crackers notes
API stands for Application Programming Interface and it is a set of functions; this set of functions is used by applications written for Windows.
Use the ADDR command to both display and change address contexts within SoftICE so that process-specific data and code can be viewed. Using ADDR with no parameters displays a list of all address contexts. If you specify a parameter, SoftICE switches to the address context belonging to the process with that name, identifier, or process control block address. ADDR [process-name | process-id | KPEB] where: process-name Name of any currently loaded process. process-id Process ID. Each process has a unique ID. KPEB Linear address of a Kernel Process Environment Block.
If you think that something inside this file is not correct and/or some questions (and/or answers) are not totally clear, feel free to ask for them in the forum or tell it directly to the mods.
the RCE staff