HEHE look at the program, u will see a anoy screen says REGISTER or semilar
enter your favorite name Mine is:
first name: Shani
code: 12345 <= very easy to remember ;)
open your fav black debugger SoftIce ;)
set a nice breakpoint BPX HMEMCPY (since getdlgitemtexta wont break and ect.)
press f5/ctrl+d
Press OK on the register button...BOOOMMM Sice poped up ;)
we are in the HMEMCPY hehe ;)
press F12.(press 8 times) <= u need to be in the crackme code AFTER 8 TIMES pressed.
*how did i know that i had to perss 8 times f12, cuz when i press f12 i pass the dll which called by windows and ect, and after 8 times i see where my serial may be [u will see; aex,edi and ect..] <= a good place ;)
after press 8 times f12 u need to see this:
xxxx:5f45c3AD PUSH FF
... . . . . . <= SOME CODE of culculation
f10 until u will see this:
MOV EAX, [EAX-08] <= fake serial/reg num store here
press: d EAX
your fake serial/name will be showed in the data ...shani....
..123456...e.w..w <= those letters aren't important
now we want the real serial of course ;)
so press f10 untill u will be back from the RET [u will see ret and after it u will jump to the place u was called from, lets say to the begining]..press f12 8 times again...u will be back to the same place..again f10 to:
MOV EAX, [EAX-08]<= fake serial/reg num store here + REAL SERIAL ;)
* u will see in the data window the same thing as we did, but the real serial will be showed for u as well ;)
