View Single Post
  #2  
Old 07-09-2010, 12:33
Cowsheep Cowsheep is offline
Registered User
 
Join Date: Oct 2009
Location: Near OEP;)
Posts: 352
Thanks: 0
Thanked 13 Times in 4 Posts
Cowsheep is on a distinguished road
Please make list of the files on disc.
The disc check is called twice.
First time, for determining where to load the files.
At second time, it checks for disc authenticy and displays the nag screen.

Also please make a miniimage.

This function is called by a dozen of functions.

004E0723 /$ 55 PUSH EBP
004E0724 |. 8BEC MOV EBP,ESP
004E0726 |. E8 E3120000 CALL darkston.004E1A0E
004E072B |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
004E072E |. 85C0 TEST EAX,EAX ; darkston.0062A168
004E0730 74 15 JE SHORT darkston.004E0747
004E0732 |. FF75 10 PUSH [ARG.3]
004E0735 |. 8B10 MOV EDX,DWORD PTR DS:[EAX] ; darkston.004E6B6C
004E0737 |. 8BC8 MOV ECX,EAX ; darkston.0062A168
004E0739 |. FF75 0C PUSH [ARG.2]
004E073C |. FF75 08 PUSH [ARG.1] ; darkston.0050FB60
004E073F |. FF92 8C000000 CALL DWORD PTR DS:[EDX+8C] ; darkston.004E063C edx+8c = 4e063c without disc, same bad boy like below, whats edx with disc?
004E0745 |. EB 10 JMP SHORT darkston.004E0757
004E0747 |> FF75 10 PUSH [ARG.3] ; /Arg3 = 00000000
004E074A |. 33C9 XOR ECX,ECX ; |darkston.0062A168
004E074C |. FF75 0C PUSH [ARG.2] ; |Arg2 = 00000000
004E074F |. FF75 08 PUSH [ARG.1] ; |Arg1 = 0050FB60 ASCII "Sorry, Insert DarkStone CD Please..."
004E0752 |. E8 E5FEFFFF CALL darkston.004E063C ; \darkston.004E063C call bad boy
004E0757 |> 5D POP EBP ; darkston.004E0745
004E0758 \. C2 0C00 RETN 0C

Last edited by Cowsheep; 07-09-2010 at 12:44.
Reply With Quote