Hello everyone! I'm using OllyDbg 1.10 to crack "Mail Server Pro v1.5" and I have a quick question:
Code:
004B0454 /. 55 PUSH EBP
004B0455 |. 8BEC MOV EBP,ESP
004B0457 |. 83C4 E0 ADD ESP,-20
004B045A |. 53 PUSH EBX
004B045B |. 33C9 XOR ECX,ECX
004B045D |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
004B0460 |. 894D E8 MOV DWORD PTR SS:[EBP-18],ECX
004B0463 |. 894D E4 MOV DWORD PTR SS:[EBP-1C],ECX
004B0466 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
004B0469 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
004B046C |. 33C0 XOR EAX,EAX
004B046E |. 55 PUSH EBP
004B046F |. 68 4C054B00 PUSH SMTP_ser.004B054C
004B0474 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
004B0477 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
004B047A |. B8 60054B00 MOV EAX,SMTP_ser.004B0560 ; ASCII "<!>"
004B047F |. 8945 EC MOV DWORD PTR SS:[EBP-14],EAX
004B0482 |. B8 6C054B00 MOV EAX,SMTP_ser.004B056C ; ASCII "CMD=Register"
The above code is called when a valid key is not found in the registry, However I cannot figure out where in the hell the code is Jumped or Returned from.
For example, after it goes through all the serial checking etc, it's either got to Jump to that code or Return to the code. Is there a way of tracing back?