Cracking Projects For Newbies

Re: Re: Project 6; Task2 - patch Friday, 05-Feb-99 01:34:47 195.148.194.34 writes: [..] :00405C38 FF36 push dword ptr [esi]; push param2 :00405C3A FF75DC push [ebp-24] ; push param1 :00405C3D E87E700000 call 0040CCC0 ; call check :00405C42 83C408 add esp, 00000008 ; esp+8 (stack pointer) :00405C45 85C0 test eax, eax ; eax & eax :00405C47 0F8434010000 je 00405D81 ; jump over nag 1 * Possible Reference to String Resource ID=61244: "Sorry, the registration code does not match! Try again or Ca" [..] :0040B735 FF75E8 push [ebp-18] ; push param2 :0040B738 FF31 push dword ptr [ecx]; push param1 :0040B73A E881150000 call 0040CCC0 ; call check :0040B73F 83C408 add esp, 00000008 ; esp+8 (stack pointer) :0040B742 85C0 test eax, eax ; eax & eax :0040B744 0F8572020000 jne 0040B9BC ; jump to nag2 [..] nag2: * Possible Reference to String Resource ID=61244: "Sorry, the registration code does not match! Try again or Ca" Ok, there is to conditional jump after calling check_serial routine. We can easily replace these jump with unconditional jump and nop the other instruction. I didn't find any check if we have modified the protection code.. only one check if we modify "evaluation version" string.. Shadow

Message thread:

Shadow: Project 6; General (03-Feb-99 05:42:39)

Shadow: Re: Project 6; My analysis about how program works.. (03-Feb-99 10:11:05)

Shadow: Re: Re: Project 6; Task2 - patch (05-Feb-99 01:34:47)

Shadow: Re: Re: Re: Project 6; Task2 - 1 byte solution found! (08-Feb-99 00:47:44)

Shadow: Project 6; Task3 - some help needed! (08-Feb-99 02:21:11)

Shadow: Re: Project 6; Task3 question 1,2 (ANY COMMENTS SANDMAN?) (08-Feb-99 07:10:22)

Back to main board

Message subject: Name: (optional) Email address: (optional) Type your message here:

Back to main board

Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.