I found Waldo !

Posted by Matthieu Suiche on November 25, 2006 · Leave a Comment 

There is a funny programmer @ Redmond who put a “Waldo” into the Windows Vista Boot Loader code :)

.text:00000000004330D8 lea rdx, aHiThere
.text:00000000004330DF lea r8d, [rax+8]
.text:00000000004330E3 rep stosb
.text:00000000004330E5 lea rcx, [rsp+198h+var_128]
.text:00000000004330EA call SHA256Update
.text:00000000004330EF lea rdx, [rsp+198h+var_B8]

.data:00000000004605F8 aHiThere db ‘H’ ;
.data:00000000004605F9 db ‘i’
.data:00000000004605FA db ‘ ‘
.data:00000000004605FB db ‘T’
.data:00000000004605FC db ‘h’
.data:00000000004605FD db ‘e’
.data:00000000004605FE db ‘r’
.data:00000000004605FF db ‘e’

What had I won? :)

Filed under Reverse Engineering, Windows · Tagged with