Main | Index

Sex Action 1.5 - VRA Games

Type : xxx HOT Game
Protection : Serial
Tech : Serial Fishing

Crack :

This program doesn't use any api to validate S/N ... all my effort to figure out where the real S/N is compared failed ... Man i must crack this game ....

How ....How ... to crack this baby ???? This program is using so many loops that if we trace we always end up inside a loop.
The program says that while entering S/N you must note time .. What the heck .. perhaps it needs time to compute real S/n. This is my last try ....

Enter any fake password like : 444555777
Now put BPX GetLocalTime in SICE.Click button "Enter password and click here"

You will break here ...

015F:004FE51D FF1560FA5100 CALL [KERNEL32!GetLocalTime]
015F:004FE523 0FB745F0 MOVZX EAX,WORD PTR [EBP-10]
015F:004FE527 668B4DFE MOV CX,[EBP-02]

Now do a memory search for your fake S/N in SICE :

:s -a 0 l ffffff '444555777'

we can see it at :

Pattern found at 0167:008B07EC (008B07EC)
0000000001 occurances found

0167:008B07EC 34 34 34 35 35 35 37 37-37 00 00 00 00 00 00 00 444555777.......
0167:008B07FC 6C 09 8B 00 00 00 80 01-B0 01 70 09 00 00 00 00 l.........p.....
0167:008B080C 6C 08 8B 00 00 00 00 00-00 00 70 09 00 00 00 00 l.........p.....
0167:008B081C 0E 00 0B 00 00 00 00 00-00 00 00 00 00 00 00 00 ................

Now disable BPX GetLocalTime and put a break point at 0167:008B07EC

:bpmb 8b07ec r

Now come out of SICE and you will break here ...

015F:004FE35B C1E902 SHR ECX,02
015F:004FE35E F3A5 REPZ MOVSD <<-- Here
015F:004FE360 FF249568E34F00 JMP [EDX*4+004FE368]

Now in SICE give this command :

:d edi

Now scroll data window few lines up and you can see real S/N !

0167:00910D44 00 00 1B 80 35 33 33 37-35 33 36 37 38 33 33 37 ....533753678337
0167:00910D54 39 30 00 00 1A 08 8E 00-7A 0D 17 80 34 34 34 35 90......z...4445
0167:00910D64 F6 3F 91 00 0C 00 11 00-FC 07 8E 00 30 00 7A 05 .?..........0.z.

Now "53375367833790" is your real password ... Enjoy it

UserCode : 02275707
Password : 53375367833790
Note : User code and Password will be different on your PC