Author Topic: novice - aneb zivotopis eraser-a  (Read 1459 times)

Z!L0G80

  • -=[t4C]=-
  • Senior Member
  • ****
  • Posts: 280
Re: novice - aneb zivotopis eraser-a
« Reply #15 on: January 17, 2007, 11:30:21 PM »
add no-cd cracky
zrovna se rypam v quake4 pro mac os-x , a vlasne reversovani v mac os-x ...

co se tyce me
jako maly zmrd sem zacal na zx spectru a ted uz sukam zenu adelam na PeCi ,programovat neumim jen se trosku vrtam v asm pro Z80,8051, MC68000, x86 a ted trosku x64 (vazne jen trosku tem 10 instrukcim se neda rikat ani vrtani ) no dale se placam v C,C--,perlu jo a jeste Basic a karla umim

heeej fiizle a moji obcanku videt nechces ?
SORRY .IAM STILL PARRANOID IN THIS FUCKING WORLD
-= SmrT SiGNaTuRaM !!! =-

Master

  • [t4C]newbie child
  • VIP
  • *****
  • Posts: 615
Re: novice - aneb zivotopis eraser-a
« Reply #16 on: January 18, 2007, 08:35:58 AM »
To ,?e je nevidi s neznamena,ze se nedivaj ;)

Edit:Tos by tak paranoidni i jak sem se objevil ja??  :D

Co se tyce toho q4,ja se s nim rypal na linuxech.Podarilo se mi obejit key kontrolu.Ale obchazelo se to spatne,jelikoz se to vsechno hledalo pouze v mrtvem kodu.
« Last Edit: January 18, 2007, 08:46:54 AM by Master »

Iron Screw

  • [TiME4CRiME]
  • Administrator
  • Senior Member
  • *****
  • Posts: 260
    • http://ironscrew.wz.cz
Re: novice - aneb zivotopis eraser-a
« Reply #17 on: January 18, 2007, 02:57:51 PM »
Quote from: Z!L0G80
add no-cd cracky
heeej fiizle a moji obcanku videt nechces ?
SORRY .IAM STILL PARRANOID IN THIS FUCKING WORLD


I agree with you man ... nothing to show, just want the CV ... ???  wtf? ... OKi, let's back to the work ....
TiME AND LiFE ARE ETERNAL - REVERSE ENGINEERING IS WAY OF LiFE
SO ISN'T CRIME

[TiME4CRiME]

eraser

  • repe cmpsb
  • Senior Member
  • ****
  • Posts: 268
  • Kill malware!
Re: novice - aneb zivotopis eraser-a
« Reply #18 on: January 18, 2007, 09:03:24 PM »
Keby niekto chcel, tak vás pochytá u? dávno... :)  otázkou je, ako by uspeli, na?e zákony sú výsmechom.

No, nič, idem späť ku crackme. Keby ste ich videli, tak sa zasmejete, ale nejako sa musí začínať i v tejto oblasti. Mo?nosti RE sú rozsiahle.

Momentálne som spravil keygen pre Cruehead's CrackMe 1 a e?te si skú?am tú jeho rutinu na prevod reťazca obsahujúceho čísla do DWORD hodnoty. Inak AT&T syntax je pekný humus, ale čo narobím, keď LCC nepodporuje Intel zápis?

Code: [Select]
DWORD str_to_num(char *pcNum)
{
DWORD dwNum = 0;

while (*pcNum)
{
dwNum *= 10;
dwNum += *pcNum - 0x30;

pcNum++;
}

return (dwNum);
}


DWORD __declspec(naked) str_to_num_asm(char *pcNum)
{
_asm("xorl %eax, %eax");
_asm("xorl %ebx, %ebx");
_asm("xorl %edi, %edi");
_asm("movl 4(%esp), %esi");
_asm("start:");
_asm("movb $0x0A, %al");
_asm("movb (%esi), %bl");
_asm("testb %bl, %bl");
_asm("je end");
_asm("subb $0x30, %bl");
_asm("imull %eax, %edi");
_asm("addl %ebx, %edi");
_asm("incl %esi");
_asm("jmp start");
_asm("end:");
_asm("movl %edi, %eax");
_asm("ret");
}


Master: U? sa preorientovávam na OllyDbg...  :cool:

Code: [Select]
004013D8  /$ 33C0           XOR EAX,EAX
004013DA  |. 33FF           XOR EDI,EDI
004013DC  |. 33DB           XOR EBX,EBX
004013DE  |. 8B7424 04      MOV ESI,DWORD PTR SS:[ESP+4]
004013E2  |> B0 0A          /MOV AL,0A
004013E4  |. 8A1E           |MOV BL,BYTE PTR DS:[ESI]
004013E6  |. 84DB           |TEST BL,BL
004013E8  |. 74 0B          |JE SHORT CRACKME1.004013F5
004013EA  |. 80EB 30        |SUB BL,30
004013ED  |. 0FAFF8         |IMUL EDI,EAX
004013F0  |. 03FB           |ADD EDI,EBX
004013F2  |. 46             |INC ESI
004013F3  |.^EB ED          \JMP SHORT CRACKME1.004013E2
[COLOR=DimGray]004013F5  |> 81F7 34120000  XOR EDI,1234[/COLOR]
004013FB  |. 8BDF           MOV EBX,EDI
004013FD  \. C3             RETN
th3 r341 f4!1ur3 !5 wh3n y0u d0n't 134rn 4nyth!n6 fr0m 4ny 6!v3n 5!tu4t!0n
the real failure is when you don't learn anything from any given situation