Je vais voir pour installer olly avec un plugin. J'ai vu qu'il existe un plugin qui affiche l'Id de resource

hxxps://tuts4you.com/download.php?view.3622
CPU Disasm
Address Hex dump Command Comments
01AD6B55 E8 AA4FFCFF CALL crdchkreg.01A9BB04 ; Donne le serial
01AD6B5A 8B85 CCFDFFFF MOV EAX,DWORD PTR [EBP-234] ;<=== ICI
048164B3 | E8 50 F7 FF FF | call <crdchkreg.sub_4815C08>
048164B8 | 0F B7 04 24 | movzx eax,word ptr ss:[esp]
048164BC | 3D 5B 9C 00 00 | cmp eax,9C5B
Form TFRAREGISTERCODE
clkRegister.TSebCommandLink
TSebCommandLink.Click -> 005E0F40
call @Controls@TControl@Click$qqrv (at 005E0F96) -> 0046D8C4
call _TfrmRegister_fraRegisterCodesRegisterClick (at 0046D928) -> 007555C8
call @RegisterButtonClickRealHandle -> 007556B8
call @SerialCheck (at 0075576A) -> 00750B60
call @SerialCheckEx -> 007514A8
Resolve "crdchkreg.dll"."CheckRegStatus" (at 00751666)
call CheckRegStatus (at 00751726) -> 00456F1C (non rebasé)
Form TFRAREGISTERCODE
clkRegister.TSebCommandLink
TSebCommandLink.Click -> 005E0F40
call @Controls@TControl@Click$qqrv (at 005E0F96) -> 0046D8C4
call _TfrmRegister_fraRegisterCodesRegisterClick (at 0046D928) -> 007555C8
call @RegisterButtonClickRealHandle -> 007556B8
call @SerialCheck (at 0075576A) -> 00750B60
call @SerialCheckEx -> 007514A8
Resolve "crdchkreg.dll"."CheckRegStatus" (at 00751666)
call CheckRegStatus (at 00751726) -> 00456F1C (non rebasé)
CPU Disasm
Address Hex dump Command Comments
039C6B55 E8 AA4FFCFF CALL crdchkreg.0398BB04
039C6B5A 8B85 CCFDFFFF MOV EAX,DWORD PTR [EBP-234]
Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 8 invités