Web : http://kickme.to/mxbnet
Contact Me : dheeraj_xp@yahoo.com


Main | Index

Robo Help 7.00.116

Type : HTML Help file designer
Protection : Date Check
Tech : Patching

Crack : Robo Help uses a simple date check.

0x493840 JNZ 0x49394A ==> Jump to 0x49394A

0x493958 JNB 0x4939E3 ==> Jump to 0x4939E3

To patch :

File : robohtml.exe

(i) Offset : 12C40[0]-[1]
JNZ ==> JMP | 0F 85 ==> 90 E9
(ii)Offset : 12D50[8]-[9]
JNB ==> JMP | 0F 83 ==> 90 E9


b>Resolume 1.0

Type : Resolume is an application for live video performances. Trigger video
clips, Flash files, and pictures. Scratch, apply real-time effects,and become a superstar VJ!
Protection : ASPack ... Serial
Tech : Self Keygen

Crack :

This program uses some lengthy algorithm to check S/N.Luckly we can use its own algorithm to find valid S/N.First find out the correct CALL and assembl our code in SICE ..so easy.First lets see the program code and CALL.
Enter some S/N and use BPX HMEMCPY and trace

0050FB1 LEA EDX,[EBP-0A] ....>>> OUR FAKE S/N
0050FB4 LEX EAX,[EBP-1A] ....>>> SOME CONSTANT
0050FB7 CALL 501374 .........>>> MAIN ALGO CALL ....HEEE ....
0050FBC TEST AL,AL
0050FBE JNZ 500FC6

Now inside this main call ...

00501387 CALL 5006CC
0050138C CMP WORD PTR[ESP],D9F6 ....AFTER A LONG ALGO RESULT IS COMPARED
00501392 SETZ AL

Now we will do a simple trick and make a counter and rest our PC will do :)
So assemble this in SICE

0050FB1 LEA EDX,[EBP-0A] ....>>> OUR FAKE S/N
0050FB4 LEX EAX,[EBP-1A] ....>>> SOME CONSTANT
0050FB7 CALL 501374 .........>>> MAIN ALGO CALL ....HEEE ....
0050FBC TEST AL,AL
0050FBE JNZ 500FE0 ............. start our trick ...NOTE JUMP ..PUT A BPX ON 500FE0
0050FC0 MOV EAX,DWORD PTR[EBP-0A] ..... READ OUR S/N TO EAX
0050FC3 INC EAX ...............INCREMENT IT ...
0050FC4 MOV DWORD PTR[EBP-0A],EAX .... WRITE BACK ....
0050FC7 JMP 500FB1 .... JUMP UP AND RECALCULATE FOR NEW S/N

Asoon as we break on 500FE0 ..look at [EBP-0A] .... man this is our S/N.

Registration Info : Use any one below

Note : S/N removed due to the request from Company



eturns Integer: 1

Registration Info :

Name = DHEERAJ
Product ID = 3897695580138
Unlock Key = 1283792544077

Note : This is where the program is storing its 50 execution count :Inside the registry ..

[HKEY_LOCAL_MACHINE\System\ControlSet001\Control]
"winsystem"="††"
"windows"="„†zŒ‡}Œ…"

Those invalid charecters are its count if you increase it you will get 50>+ execution ..

 


0x40A6AB CMP EDI,EAX =>3C --"60" ; EDI = NO: DAYS USED
0x40A6AD JLE 40A70A = 7E 5B --> GOOD BOY OFFSET = A6AD
...........................................
NOW BPMB 5F5A78 RW --- CONTINUE
...........................................
0x40A942 PUSH 5F5A78
0x40A947 CALL [005B42A8]
0x40A94D ADD ESP,04
0x40A950 CMP EDI,EAX
0x40A952 JLE 40A973 = 7E 1F --> GOOD BOY OFFSET = A952

So all you want to do is to convert :
JLE ---> JMP i.e 74 ===> EB

 


Suppose we just try to redirect this check to an original and virgin