![]() 0x2e5 = 741 must be MAX_X, which makes sense as when I move my cursor to the far left hand side of the image, the title bar goes up to 740 as the first coordinate: Stepping forward two to 0x401482, it’s loaded 0x52414C46 (“RALF”) into EAX, and 0x2e5 into ESI. I’ll run until the program is running, and then click somewhere in the pixels. I’ll open x32dbg and set a breakpoint at 0x401477, where it is loading “FLAR” into EAX to compare. If I can figure out what MAX_X and MAX_Y are, I’ll know the pixel to click. ![]() S_FLARE-On_00412004 is a global, named by Ghidra, that’s initialized to “FLARE-On”. ![]() Otherwise, it increments CLICK_COUNTER and then checks if x and y are some specific values: ![]() The docs on WM_LBUTTONDOWN show that this is getting the x and y coordinate from the lparam, and checking if the global I’ve named CLICK_COUNTER is equal to 10 (if so, print “Womp womp” and DestroyWindow). Void _cdecl initWinClass ( HINSTANCE param_1 ) ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |