Acid_Cool_178
presents he's
#11 Tutorial |
For Hellforge |
This Text Are Only Ment To Edcucational Purpose And Not To Be Used Illegaly, I Take No Response For Illegal Use Of This Text. Move On On Your Risc.
Athour Information |
acid_cool_178@hotmail.com | ||
Age | 17 | |
Web Page | http://acidcool.cjb.net/ | |
Date | March 2K | |
Member in | Hellforge | Flying Horse Cracking Force |
Groups Web Page | Hellforge Login | FHCF Login |
Program Infromation |
Name | Crackme 3 by Fr1c | |||
CrackMe3.exe | ||||
Athour | Fr1c | |||
Where to Downlaod | The Crmper Crew | |||
Size | 13KB | |||
Tools used | W32Dasm | Downlaod At | ||
1. Player Tools | ||||
2. Programmer Tools | ||||
What kind of a program | Crackme | Shareware | ||
Skill | Easy | Not so easy | Hard | X-pert |
Information about the Protection I |
This crackme got one file outside the crackme3.exe and are comparing it with the real serial
Before we start |
Nothing to say
The Process |
Fire up Crackme3.exe in W32Dasm and goto REFS-->String Data References
Dubbleclick on Registred and now you can see this code.
* Possible StringData Ref from Code Obj ->"REGISTERED"
|
:00402848 68A01E4000 push 00401EA0
<-- You will land here
:0040284D 8B8D58FFFFFF mov ecx, dword ptr [ebp+FFFFFF58]
:00402853 8B11 mov edx, dword ptr [ecx]
Scroll up and you can see this
:0040281B 0F848E000000 je 004028AF
change to
:0040281B 909090909090 je 004028AF
And you have patched the crackme
But we won't do that.
Scroll more up and you can see this.
* Possible StringData Ref from Code Obj ->"98765432112345"
<-- The Code
|
:004027F7 C745947C1E4000 mov [ebp-6C], 00401E7C
:004027FE C7458C08800000 mov [ebp-74], 00008008
Well, now we now's the code, scroll more up and you can sse this code.
* Possible StringData Ref from Code Obj ->"crackme3.key"
|
:004027B2 68541E4000 push 00401E54
:004027B7 6A01 push 00000001
Well, just create one file called crackme3.key and write 98765432112345 and save the file
run the crackme and it's registred
Ending |
Well, my first keycheck with no help :)
Information about the Protection II |
This Crackme hace the filename and the code saved as strings. Not bad :)
Greetings |
LaZaRuS, Wajid, Borna Janes, ManKind, Eddie Van Camper, ACiD BuRN, KoRnFLeX, Eternal_Bliss, Potsmoke, DiABLO. Torn@do, ^AlX^ and all the other i have forgotten