" TOMB RAiDER III "

 

This tutorial is coming from... 

 

ReFleXZ '99
Url: Http://ReFleXZ99.cjb.net
Email: ReFleXZ@fcmail.com


 
 

About the essay...

Written by:
ACiD BuRN

Date:19th February 1999
Program name: Tomb Raider 3
Program type: W32
Program location: Here
Program filename: N/A
Program size: n/c

Tools required:
Wdasm 8.93

Difficult level:
Easy (  )  Medium (   )  Hard (    )  Pro (    )
 


 
 

Introduction...
Today , we will speak about CD check on Tomb3 !!! (editor said : good protected ..)
This game is protected against copy because there is 4 files of 600 Mo !
4*600= 2400Mo !
A CD-R isn't greater then 650 Mo so , it is impossible but there is a problem !
the original CD of Tom3 contains 3Go !!!
like nothing is impossible , i will explain u how to copy it and how to crack it !!!


 
 

About the protection...
A Stupid Cd check with check of files ....


 

The Essay...
So , let's go !!
the 4 files are : Awcs.afp ; Neir.afp ; Oket.afp et Vfaw.afp.
For duplicate tomb 3 , we have to copy on you hard drive all the files of the cd except the four !!!
then create 4 files with the same name , and put them in the directory where you copy the CD
before !
open this files and put 1 caracter in it !! just 1 octet !
now we can record tomb 3!!
but the game won't work because it is protected yet !!
Now , it is Time to crack !!!
We are playing with a cd check !!! and the game tell us : " Tomb Raider III CD ?"
We will kick this shit !!!
if you have already cracked with wdasm , you will think : "i will search this phrase in String
data references and crack it !!" but we can't found it !!! :(
So we are in crap !!
lets think a few ?
we have got 4 files , and we kicked them why not looking at this files ?
and in String data reference we see : d:\Awcs.afp , d:\Neir.afp , d:\Oket.afp et d:\Vfaw.afp.
Yeah !!!! i think it is a good thing !


we will try on the first!
Double click on it and we are in Wdasm ! we press up with the scrol bar and we found :

the jne (Jump if not equal) do the jump if it can't find the file with 600 Mo we change it
in je (jump if equal) and now , the prog jump when it found the file !! it can always search !!
it will never find it because , now it is equal to 1 octet !
Ok ! now just edit in hex the tomb3 file and search for 85FF756568D4 and replace it by
85FF746568D4 . now , save the files !
the jne 0048D2CE is now Je 0048D2CE.!!!
Now , we have to do the same on other files (d:\Neir.afp , d:\Oket.afp et d:\Vfaw.afp)
the 2 first will be like the first , but the last (D:\Vfaw.afp) isn't the same !
we don't care of the last , there is nothing to change !
so, if you do the same thing on the 2 others files , you have done this :

- for "Neir.afp":
0F85F9000000 by 0F84F9000000 ===> 85 (jne) becomes 84 (je)
- for "Oket.afp":
0F85AD000000 by 0F84AD000000 ===> 85 (jne) becomes 84 (je)
- nothing for "Vfaw.afp"


now , you have to save the change with an hexeditor!!
when it is finish , you just have to run the game !!!
the Game work good !!! with a CD-R !!!
ToMB RAiDER III is Now Cracked !!!

notes :

if you want to save the change with the hexeditor , you must save the file with another name
because it is used by Wdasm and it is write protected !!
ex: save it with Tomb.exe then close Wdasm and rename it with Tomb3.exe !

voila ! it is finish for this tutor ! I hope you learn something in this !!!
if there is one problem you can mail ma at acid2600@hotmail.com.
Happy Cracking and have FuN ! :)

ACiD BuRN [ReFleXZ'99] 


 
 

Final Notes...
Greetz To:

R!SC, ^Inferno^, AB4DS, Cyber Blade, Klefz, , Volatility, Torn@do, T4D, Jeff, [Virus], Jane , Appbusta , Duelist , tKC , BuLLeT , Lucifer48 , MiZ , DnNuke , Bjanes ...
---> 4 Being So Good Friends To Me.
Sorry if you are not here too many people to greetz !!!)

                                       ....And All Crackers !!! ....

U can Found me on IRC : At #ReFleXZ99, #Cracking4Newbies , #ECL on Efnet


 
 

Disclaimer...
This tutorial is written for EDUCATIONAL purposes only.
So if you want to use the program after its trial period ends please BUY IT!
Support shareware (and its authors), this is our learning tool!

ReFleXZ is not responsible for any damage caused with this essay or any of its parts.
So everything what you're doing and 'experimenting' is on your own responsibile!

Also, in this tutorial you'll not find any serial numbers, so try to search
elsewhere under Cracks and Warez.

Copyright © 1999-2000 By ReFleXZ '99
All Rights Reserved