CRACKING N░4 By ...

             How to crack Hellforge Crackme II by LaZaRus


1) Find the good serial with soft-ice:

this crackme have a serial / name protection.
Cool, fire up Soft-ice!!

there are 2 breakpoints that works in Win32 cracking they are:
- bpx Getwindowtexta
- bpx Getdlgitemtexta

ctrl+D and we are in Soft-ice.Enter this breakpoints and press F5
to return to Soft-ice!
Enter name: ACiD BuRN and serial: 1122334455.
now press on "Click here to check your serial !!!"
Wrong code .. What ??? we are not in soft-ice !
so this breakpoints doesn't work on it !! shit !
so will try a bpx on hmemcpy . this always break !!!

ok, now re Enter name: ACiD BuRN and serial: 1122334455.
press on the button to check and now , we back in Sice !
Cool !
we see kernel at the down of the sice window.
we are not in the crackme, so press F12(7 times) untill you see
HF CRACKME ..
now we are in the good place .. press F10 to trace the code.
if you look at eax you see eax=9. it is the lenght of your name.
len of ACiD BuRN  = 9
Continue to trace with sice a few times, and you well se that eax
change : EAX=B92COC.
type d eax in soft-ice and you see in the data window: ACiD BuRN
and a number: 104837121.What is this ? a serial ?
we will try it !!

type bd * for desactivate all breakpoints an enter:

nAME: ACiD BuRN
cODE: 104837121

Cool , the message : You did it !!!
Well done, Crackme cracked !!

2)how to Register with any serial

for this , we will patch !
open Wdasm and disassemble the file.
Now in String data reference search Wrong Code.double click to
go in Wdasm.double click again and you see that there is 2 references.
at the first there is no important thing, but the second !!!
press up, and we will find a test. we see:

Change the jne 00426993 (7518) by NOPs (9090) and the prog will 
never go on the error !!! cool prog cracked !
so with an hexeditor search : FDFF75186000 and replace it by 
FDFF90906A00, save and it is cracked !!!
enter your name , the serial you want and press the check button.
You did it !!!
Crackme cracked !


hope you have undurstand all this essay!
if you have any question or suggestion mail me at acid2600@caramail.com
Bye and Happy Cracking !

            
           				--==[ACiD BuRN]==--