View Single Post
  #18  
Old 21-06-2007, 07:10
TippeX's Avatar
TippeX TippeX is offline
zeroes and ones.....
 
Join Date: Jan 2003
Posts: 3,842
Thanks: 2
Thanked 33 Times in 23 Posts
TippeX is on a distinguished road
probably just a crc check, its relatively hard in a high level language to force code cave generation in the code (especially if you have the compiler optimisation flags) so i'd say its pretty rare

unaltered exe file? well how would it be a patch/upgrade?

change in opcode can be one of 2 possibilities

1. crc used
2. actual opcodes are used as a crypt/decrypt key

you just need to investigate it further, remember that its very rare for this sort of stuff to be put in at compile time, rather its done after compile, via binary patching / external tools and so on, so at one point in time the code was 'clean', thus, if the stuff is removed properly, the code should run fine.
__________________
bleh
DO NOT PM me with questions, leave that in the forums...ESPECIALLY if i dont know you...
Reply With Quote