ARTEAM EZINE ISSUE IV
After we bypass the first check, we encountered another check by the application again. This time round, it retrieves the 2nd and 9th Character and stored it in edx and eax respectively. Next, it add 0xE to the 9th character to compare whether it is the same as the 2nd character. If it is, the application continues.
Just as we thought that we had gone through the checks implemented in this application, there is another checking being done again. But this time, it retrieves the 3rd and 8th character and subtracting 0x14 from the
Handy Primer on Linux Reversing by Gunther
62