Crackme 3 - Solution

//Distributer: http://cod3r.cjb.net
//Program Name: Crackme 3
//Programmer: n0p3x
//Date: 25th April 1999
//Version: 1


//FOREWORD
This program searches for a keyfile. It then reads in some data from the keyfile if it is found and compares it to a string. If the data in the file is the same as the string then the program reports that it is registered. This is pretty easy to crack and is really just an introduction to keyfile cracking.

//TOOLS
Softice / WDASM

//SOLUTION
1) Firstly you need to find out where the keyfile should be and what it is called. You will need some sort of file monitoring tool. These are easy to find on the internet.
2) Once you find out the name fo the file a good idea is to create the file using a hex editor. I created a file called keyfile.dat in the same directory containing 5 bytes and the string "hello"
3) Type "BPX READFILE". Click on the re-test button. Sice will pop up.
4) Step out of the windows calls using F12. Then press F10 until you reach a line saying "KERNEL32!LSTRCMP". On this line of code type "D 0040208D" and you will get the actual string it is looking in the file for, and typing "D EBP-0C" and you will get the string your file contained.
5) If you look carefully at that section of code you should easily be able to understand where I got those values from.
6) Hex edit your keyfile and enter the string that your string was compared with in the keyfile. Save changes and re-run the program. Click on the re-test button and your program should be registered :-)

//PERSONAL GREETS
- Carolyn : For being great.
- Pri$m : For being a cool person and programmer.
- theForger : For a great tutorial.

//OTHER GREETS
http://www.pascal-central.com : For being interested in my email app.
#cracking4newbies on efnet : For being a cool place to learn.
Borland / Inprise : For giving me an alternative to Microsoft


//END BIT
Thanx for reading.
n0p3x