home *** CD-ROM | disk | FTP | other *** search
- --Softice + D32DASM Tutorial---
-
- Written by Shany
- Email: shanytc@yahoo.com
- Date written: 19.4.2001
-
- Program Details:
- Name: Oliver's CrackMe #1
- Author: BenGALY
-
- Tools Used:
- Softice
- d32dasm
-
- ________________________________________________________________________
-
-
- -About this protection system-
-
- easy Protection which based on a name/serial number.
- __________________________________________________________________________
-
-
- The Essay
-
- As this is a tutorial for newbies, I'll go into details about how I go
- about cracking the program. I suggest that you read this tutorial first.
- When you have completed the tutorial, leave this tutorial open and follow
- the instructions. Re-do it once more after you have completed the step
- by step guide...
-
- In this essay, when I write type "d EAX" or similar commands in Softice,
- I mean it without the quotes.
-
- __________________________________________________________________________
-
- Lets Crack The Bitch ;)
-
-
- ok that's easy. ;)
- 1.
- open d32asm and dissasmble the crackem..(i hope u know that).
- then press the StrHref button..look for "u got it ;) " string, press it.
- u will be at:
-
- :00430EA9 3BD8 cmp ebx, eax
- :00430EAB 7E99 jle 00430E46
- :00430EAD 8B45F4 mov eax, dword ptr [ebp-0C] <= we need to bpx here
- :00430EB0 8B55F8 mov edx, dword ptr [ebp-08]
- :00430EB3 E8902BFDFF call 00403A48
- :00430EB8 750A jne 00430EC4
- string reference------------------------>"u got it ;)"
-
- so d32asm helps us alot as u can see..so what's next??
- write down 00430EAD on paper ang read next ;)
-
- 2.
- open the crack me , u see 2 text field, i entered this:
- name: bengaly ( u must have a name more then 6 letters) there is a cmp with 0006 or 008
- serial: 123456 <= very easy to remember ;)
- open your fav black debugger SoftIce ;)
- set a nice breakpoint BPX HMEMCPT
- press f5/ctrl+d
- Press CHCEK THE SERIAL..BOOOMMM Sice poped up ;)
- we are in the HMEMCPY ;)
- press F12.(get out from fucking DLL, press 12 time (to go over the ret commands)
- *now u in the code window*
- press:
- bpx 00430EAD (then press Enter) and press f5
- u will land here:
-
- :00430EA9 3BD8 cmp ebx, eax ;name compare to fake serial
- :00430EAB 7E99 jle 00430E46 ;jump is lower
- => we land here:00430EAD 8B45F4 mov eax, dword ptr [ebp-0C] ;our name
- :00430EB0 8B55F8 mov edx, dword ptr [ebp-08] ;our serial generated
- :00430EB3 E8902BFDFF call 00403A48 ;good boy <;)
- :00430EB8 750A jne 00430EC4 ;bad boy >;/
-
- now press 1 time f10..and u will be at :
- 00430EB0 8B55F8 mov edx, dword ptr [ebp-08]
-
- press: d eax
- u will see the real serial at the data window ;)
- for me:
- name: bengaly
- serial: 454583575510418
-
- cracMe cracked ;)
- __________________________________________________________________________
-
-
-
-
- Final Notes
-
- This tutorial is dedicated to all the newbies like me. I've tried to
- explain everything in details.
-
- This is my first tut so...;)
- And because I'm a newbie myself, I may have explained certain things wrongly
- So, if that is the case, please forgive me. Email me if there is anything
- you are not clear about.
-
- My thanks and gratitude goes to:
-
- ---ANALYST(ACiD-BUrN)--- ; for helping in cracking
- ----CODE_INSIDE----- ;for helping in cracking
- -----BLAcKgH0sT------ ;for being good friend :)
- -------FusS------ ;asm / keygenning helper
-
- All the writers of Cracks tutorials and CrackMes