Acid_Cool_178
presents he's

#25  Tutorial

 

For Hellforge

This Text Are Only Ment To Edcucational Purpose And Not To Be Used Illegaly, I Take No Response For Illegal Use Of This Text. Move On On Your Risc.

Athour Information
E-mail acid_cool_178@hotmail.com
Age 17
Web Page http://acidcool.cjb.net/
Date March 2K
Member in Hellforge Flying Horse Cracking Force
Groups Web Page Hellforge Login FHCF Login

 

Program Infromation
Name Crackme 4 - n0p3x crackme4.exe
Crackme 4a - n0p3x crackme3.exe
Athour n0p3x
Where to Downlaod http://cod3r.cjb.net
Tools used Soft Ice Downlaod At
1. Player Tools
2. Programmer Tools
What kind of a program Crackme Shareware
   
Skill Easy Not so easy Hard X-pert
         

 

Information about the Protection I

This protection needs a correct CD in the CD-ROM that we don't have.

Before We Start

Task 1 <-- Crackme 4
Task 2 <-- Crackme 4a

The Process

Task1
Start the crackme and it says the it needs a CD. Clock on the "OK" button to move on with the crackme.
Open Soft Ice by pressing CTRL+D and type Bpx GetDriveTypeA [ENTER]
Exit Soft Ice and press on the "Re-Test CD" and Soft Ice pop's up. Now press F12 once and you will stand at  CMP EAX,05
Write in A [ENTER]
Write in CMP EAX,03 [ENTER]
Press enter once more time
Clear all og the breakpoints by entering BC* [ENTER]
Exit Soft ICe by pressing CTRL+D and tell me what you can see :)
It's got a CD :))

Task2
Start the crackme and it says the it needs a CD. Clock on the "OK" button to move on with the crackme.
Open Soft Ice by pressing CTRL+D and type Bpx GetDriveTypeA [ENTER]
Exit Soft Ice and press on the "Re-Test CD" and Soft Ice pop's up.
Press F12 once and LOOK at the code. We can se any CMP XXX,05 so we have to so something other cool stuff now.
Press F10 until you are at 401097
Write in A [ENTER]
Write in MOV EBX,03 [ENTER]
And press enter once more time
Look down and you can see this CMB EBC,ECX
EBX are the CD-ROM wich he have set the vaule to 03
ECX are the Hard Drive wich ARE the vaule of 03 :)

Information about the Protection II

Task1 and 2
GetDriveTypeA worx like this

UINT GetDriveType(
LPCTSTR lpRootPathName // address of root path
);

CMP EAX 06 RAM-Disk (only GetDriveTypeA)
05 CD-ROM-Drive
04 Remote Drive (Network)
03 Fixed Drive (Harddisk)
02 Root Directory does not exist
01 Drive can't be determinded
00 Drive can't be determinded

Understand, we have canged CMP EAX,05 to CMP EAX,03

Greetings

LaZaRuS, Wajid, Borna Janes, ManKind, Eddie Van Camper, ACiD BuRN, KoRnFLeX, Eternal_Bliss, Potsmoke, DiABLO. Torn@do, ^AlX^  and all the other i have forgotten