home *** CD-ROM | disk | FTP | other *** search
/ Reverse Code Engineering RCE CD +sandman 2000 / ReverseCodeEngineeringRceCdsandman2000.iso / RCE / E_bliss / crackme5_fireworx.txt < prev    next >
Text File  |  2000-05-25  |  851b  |  29 lines
  1. FireWorx Crackme5
  2. -----------------
  3. Tools Used:
  4. SoftIce
  5.  
  6. ---
  7. Target URL:
  8. http://surf.to/FireWorx
  9.  
  10. ---
  11. Protection:
  12. Code
  13.  
  14. ---
  15. Start the Crackme, enter a code and set a breakpoint on hmemcpy
  16. and S-ICE will break direcly, then trace until you come here:
  17.  
  18. :00441A0E  8B45FC              MOV     EAX,[EBP-04]
  19. :00441A11  50                  PUSH    EAX
  20. :00441A12  8D55F8              LEA     EDX,[EBP-08]
  21. :00441A15  8B83C8020000        MOV     EAX,[EBX+000002C8]
  22. :00441A1B  E8A417FEFF          CALL    004231C4
  23. :00441A20  8B55F8              MOV     EDX,[EBP-08]
  24.  
  25. when you have runned the MOV EDX,[EBP-08] operation, do a 'D EDX' and you will
  26. see Regcode in the Data window, and guess what, that's the Regcode.. enter it and
  27. a nice little messagebox will pop up, saying that we have cracked it...
  28. ---
  29. /Klefz - http://klefz.cjb.net