iNCLUDED fiLES: .registry crack HighGrow 2.0 Serial.txt How to crack HighGrow 2.0 Tutorial _.,-*~'`^`'~*~'`^`'~*~'`^`'~*-,._ _.,-*~'`^`'~* dA bREAKER cREW 2001 *~'`^`'~*-,._ ÚÄÄÄÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ¿ ³ How to Crack HighGrow 2.0 by SvenZZon ³ ÚÄÄÄÄÁÄÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÁÄÄÄÄ¿ ³ ³ ³ Target: Highgrow.exe (HighGrow 2.0 by Slick Software 1999) ³ ³ Tools Used: w32dasm (Not really needed) ³ ³ Softice 4.0.5 ³ ³ Protection: Name/Serial ³ ³ Method of cracking: "Serial Fishing" ³ ³ ³ ³ Easy [X] Medium [ ] Hard [ ] Advanced [ ] Advanced as hell [ ] ³ ³ ³ ³ ³ ÃÄÄÄÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ´ Okay, this is my first attempt to write a tutorial about Serial fishing. I will try to do my best to explain how I cracked this program. I will not assume anything... hehe, as most of the tutorial authors do, this is a newbie document and the target (HighGrow2) is not so very hard to crack, although there is a nice little suprise inside the routine :) Nothing that makes the cracking harder though, just a fun lil trick. Okay, install the program and run highgrow.exe. You will soon notice that there is a 60-day limit. Your plants will die in 60 days (In this program you grow legal mary j). Look at the menu "Options" and you will see "Registration Code". Press it, and a box will appear. Here you can write your username and serial code. But don't do this yet, I've something I want to show you...remember that little trick I talked about >:) ? Now, load highgrow.exe into win32dasm and search for the text AK-47. This will take you strait into the serial checking routine. If you look three lines up you will see the text: * Possible StringData Ref from Data Obj ->"273-8472561-326" Try this code into HighGrow and see what happends. Yeah, an error box shows up, saying: Nice Try ! Try cracking this version...bla..bla. Aha! There is another cracker who cracked an earlier version of this program. Hehe so the author has planted a little secret for him...if he writes his serial into the new version, t his message will come up. Thank you Slicksoft.! Now we know how the correct key should look like: xxx-xxxxxxx-xxx >:]. Now get your ass out of win32dasm and launch HighGrow again. Fetch the Registration box and type in whatever you want. I typed: Name: SvenZZon, Code: 111-2222222-333 . But don't press enter yet. Launch Softice (Ctrl+d) and put the needed breakpoints. Notice that GetDlgItemTextA or getwindowtexta doesn't work, so we'll hafto use HMEMCPY. Set the breakpoint (bpx hmemcpy) and get out of SiCE again (Ctrl+d). Now press the OK button, and SiCE will pop up. But the Registration window had two boxes, and now it has only calculated one. So press F5 to go further through the code. Now, HighGrow has generated both the Serial Box and the Key Box. It's time to do some "fishing". Press F11 to go into the routine and you will be under a line that says something about KERNEL32. Now we will hafto do a search to see if the False registration-code that we entered is located anywhere in memory. So type: s 0 L ffffffff "111-2222222-333" This means Search x lenght adress "string", or something like that hehe. So, did you found it? When you've found it, clear all the breakpoints you already have (bc *) and set a memory break at the adress where you found your false serial number (bpm XXXXXXX). Press F5 again, and SiCE will break, if you have the code window up, you will not see your false reg-code. If you don't, type the command WC (Window Code) to see it. Okay, there it is? Now, the only thing you hafto do, to locate your valid serial is to look into the registers. Since I have deleted the program, I don't know what register it is...but I think it was EAX or EDX (Might be ESI too). But try to give SiCE the command: d EAX and see if you see anything in the code window (Also try d EDX and d ESI). Did you find it? If not, you can toggle down your code window (ALT+Uparrow/DownArrow). So, what does the command d EAX do? Well, EAX, EDX and ESI are 32-bit registers. This is where your program store temporary memory and data. The ASM code then CALLS this data, exports it to different flags in your Math-processor, manipulates it...ect. Although, this is another story, it is very important to learn if you want to be a cracker though, so I suggest you go fetch another tutorial for this. Hopefully you've now found it :) My serial was: 162-QM*****-104 (Censored by CTW). In my next tutorial I'll write how I cracked the CD-Check for Serious Sam. Regards, SvenZZon Greets: tKC, Kript0n, ORC, Fravia, The Sandman, R!SC and LW2000, All dBC members! Notes: A better version of this tutorial will soon be outT file: