|
-
April 8th, 2012, 03:25 AM
#3
Do an actual "string search"... but make sure you're in the main module in ollydbg. Then you want to lookup pointers to that string.
You'll see it push the address of the string to a register then call the api. You'll want to scroll up a little and loopup any jumps to the api.
Those should be your "if its not registered then display this" type of arguments.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|