W32DASM6 is a nice Win32 Disassembler that can disassemble most Win 32 binaries. 

The full blown registered version lets you print and save the disassembly to 

an editable text file. Now the problem is that the (undoubtedly capable) 

programmer spreads his valuable work in the form of a crippeled demo 

version that lacks the abovementioned features. Now you little scholar of 

crackmanship want to follow +ORC's well done lesson about dead listing 

cracking (9.3), and ask yourself, since you weren't smart enough to find 

the registered version (I'm not going to even dare to ask you to crack it 

yourself): How the fuck do I get a textfile I can load in my editor or 

wordprocessor ?

    

Due to some strange events which occurred shortly after the big bang, the 

universe created nice people like me (and +ORC and all the other warriors 

that fight the giant), who is now going to tell you how to get your 

disassembly-textfile into your favourite editor.

    

Theory:    

W32DASM6 will write the disassembly of your target file to a hidden temporary 

file called winsys (no period-type file ending like winsys.xyz, just plain winsys), 

which will be placed in the same directory where your target file is sitting. 

You will of course only see it if you told Explorer to show hidden files, (incase 

you should not know how to do this, get a good game like diablo and forget about 

cracking) the w32dasm will keep the file open as long as it runs, so you cannot 

open the file with your editor as long as w32dasm is running. When you exit 

w32dasm it will immediately delete the file, so there should be no way to access 

it. But wait.....there always is a way. 



How to do it:

    

Windows NT :

Fire up w32dasm, let it disassemble your target binary. Then kill W32dasm with 

the NT-Taskmanager. The disassembly-textfile will remain in the directory of your 

target binary and will be named winsys (without file extension). You can now open 

it in any editor.

    



Windows 95 :  

Since Win95 is a toy-operating-system, it doesn't provide a tool to radically 

terminate a program, thus letting w32dasm do its deleting job on our desired 

winsys file, if you try it with Win95's Taskmanager. But dont worry young warrior, 

the tools needed to provide the necessary power to Win95 will be provided by me 

right here: They are called PS.EXE and KILL.EXE, those two are Win32 ports of 

common Unix commands. They are Freeware (thanks go out to their unknown developers).



How to do it:

1. Fire up w32dasm and let it disassemble your target binary.Don't shut w32dasm 

   down, yet!

2. Place PS.EXE and KILL.EXE in c:\Windows\command, or any other directory that 

   is included in your %PATH%

3. Open a MS-DOS window.

4. On your command prompt execute PS, its output will look like:

    

HWND     PID           PRIO          UTime       KTime        NAME

85c      -97543         NORM      00:00:12    00:00:08      URSOFT W32DASM6 DEMO 

blah blah blah

.......

.....lotsa lines looking equal

    

Depending on how many apps/progs are running this list can get very long, the 

numbers also will always vary. What you need to do is simply look for the PID 

of W32DASM which in this example is -97543.

    

5. Still being on the command prompt you now type:

   C:\>Kill -97543 (

   or whichever number PS.EXE showed you, I told you they will always vary)

6. W32DASM will instantly kick the bucket and vanish from your screen, leaving 

   you with the desired editable disassembly named winsys (without extension) 

   in your target binary's directory.

7. You can now open it in your favourite editor or wordprocessor.

    

Now if this How-To is to difficult to understand for you, stay away from cracking, 

I really tried to make it as plain and simple as I could, and since I myself use NT, 

I even worked out a way for humans using Win95, now isn't that nice ?

My next W32DASM HOW-TO will teach you how to render the w32dasmd.exe in such a way, 

that it will not delete the winsys file upon exit. Stay tuned to this great site 

and you wont miss it.

    

This How-To was written by LordClito in Feb. 97. All Copyright Shit of course 

applies.