Hi HI 

Cracker: Miche
Target: EditPlus2
Address:
Tools: ProcDump 1.6
       W32dasm 8.93
       Hiew 6.16
Tools address: www.protools.cjb.net
Level: Hmmmm Intermediate
Date when i made this crack: Octobar 2000

--Tutor written on English version--


Ok dudes this is tutorial for EditPlus2.
This progi is packed by Petite 2 packager or how do you call him on English.Sorry i dont speak Englis very well cause is not mother language.he
Ok frist install your progi ofcourse.After you have installed try to open him in w32dasm and
you wount made it,why beacause it is packed with petitte he.So what we have to do now is to try to unpack editplus.exe file with ProcDump so fire up ProcDump and go in section Unppack,then chose Petitte then editplus.exe file to unpack.After couple milisec you will get message that he unpacked file or you will get some error message and that mean that you have somekind virus in your computer heheeheheheeheheheheheheehehehaaaaaaaahahaaaaaaaa!
Fool!!
HE ok go in directory of edit plus and youll see one more file un-packed that is our baby what we need to work with here.Ok load this file in w32dasm and you will be hepy cause we made we unpack that file he it wasnt so easy ha.O try to load editplus.exe file youll we be able to that but!!!! there is no messages in SDR window why i dont now cause onestly this is my first crack with packed files.And if we try to start editplus2.exe we will get erroe message that say that we have virus in our compy thats why we dont need this file anymore so you can delete him.
Ok after we dissasembled file un-packed file we can see ALLL i say All messages in SDR window,so we can atempt on cracking our progi.
Ok look for message "Invalid registration....." and click on it once,twice youll see there are two ponit where we landed.Ok click once or twice i dont remember and scroll up until:
*Reference (C)ondi......
|:00427694(C)
Press shift+F12 and write this number up and click ok you will land on jne jump then see his offset number and write it down then go in Hiew load oure file and change jne in je i think you know how to do it.With this change we kill our nag screen that remind us for evaluation.
With this we crack our progi.O i forgot that message that you can see bc clicking on help then about dont warry we kill protction of our progi and with that we kill coundown for evaluation.So if you have any question send me message.Enjoy!!


-- Tutor written on Bosnian language --

Eh raja evo još jednog tutora na naškijem jeziku jelte Bosanskom ha.Idemo dakle
Podrazumjevam da ste našli sav alat i da znatega pomalo koristit.Eto ovaj naš programčić (mehko ć na kraju he) je upakovan jel i lijepo zapakovan u jedan paketić,a kako znamo svaki paketić se može otpakovati jel.U kakav je paketić upakovan mislim kako se upakuje ručno i kako se otpakuje ručno fakat neznam jer je i ovo moj prvi krek nekog pakovanog fajla pa sad detalje neznam znam samo da je upakovan u pettie paket jel kao onaj keks petitebeure bo bosnaski hehe.Eh dobro mi imamo programčić ProcDump pomoću kojeg ćemo otpakovat naš program.Dobro pokrenite Procdump i izaberite unpack zatim pettiete 2 i onda naš exe fajl editplus2.exe jel i pričekamo par milisekundi i on nam kaže da je otpakovo ili da nije eto kod mene ga otpakovo.Eh ako sad pokušamo pokrenuti editplus on će nam reči kako smo zaraženi nekim (virusom ma jel majketi).Eh sad fino odemo u direktorij editplusa i izbrišemo fino editplus.exe fajl štooo? neki će odmah reč e pa:
Ako probamo disasemblirat editplus.exe fajl vidjet ćemo da to sad možemo za razliku dok još nismo bili otpakovali naš fajl,ali kad disasembliramo naš fajl vidjet ćemo da nema nikakvih prouka u SDR prozoru,stoga pogledajmo još u našem direktorij i vidjet ćemo još jedan novi fajl koji se stvorio kad smo otpakovali editplus.exe fajl.Sada disasemblirajmo taj novi fajl koji se zove un-packed editplus tako nekako jel valjda dovoljno dobro vidite i imate barem malo klikera (u glavi jel).Eh kad smo disasemblirali pogledajmo u SDR prozor i vidjet će te da imamo sve prouke koje se pojavljuju u našem programu.Sad tražimo u prozoru poruku "Ivalid registratio...." i kliknite na nju jednom ili dvaput i vidjećete da ćemo biti pozicionirani na dva razilčite linije.Eh sada pomjerajete se nakon štoste kliknuli jednom ili dvaput neznam sad tačno,uglavnom jel pomjerajte se prema gore dok nedođete do:
*Reference (C)ondi......
|:00427694(C)
Eh sada pritisnite shift+F12 i ukucajte ovaj broj gore da nas premjesti na ovu liniju.Biti ćemo pozicionirani na jne naredbu,i sad naravno pogledamo offset ove naredbe i zapišemo ga na papir.Eh sad se naravno pitate što baš na ovaj skok e pa ako izvršite ovaj skok on će skoćiti malo iznad one naše poruke invalid... tj. skočiće na proceduru koja poziva onaj nag screen dakle onaj naš prozorčić,zato mi sad mjenjamo ovaj naš jump-skok jne u je.Dobr otiđite u HIEW i učitajte ovaj fajl pa onda odete na offset i jednostavno promijenite jne u je.Kako se mijenja valjda znate jer sam naglasio da je ovo tutor za malo napredne.Eto to je to nema potrebe za bilo čim dodatnim jer smo ubili onaj naš prozor i time zaustavili ujedno i odbrojavanje evoluacije.Eto sad uživajte!



C  R  A  C  K  E  D   B Y   M i c h e !!!!


e-mail: bogumileh@yahoo.com