Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


hmm crackme

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming -> Crackmes
View previous topic :: View next topic  
Author Message
Buggy
Advanced Cheater
Reputation: 0

Joined: 04 Jan 2008
Posts: 72
Location: Republic of Korea (South Korea)
PostPosted: Mon Feb 11, 2008 1:45 am    Post subject: hmm crackme Reply with quote
it might be easy too -_-, it hink
_________________

[img]
<a><img></a>[/img]
iroo sooo hooooot
Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 198

Joined: 25 Jan 2006
Posts: 8517
Location: 127.0.0.1
PostPosted: Mon Feb 11, 2008 7:01 am    Post subject: Reply with quote
Importing winsock for a crackme.. eh a bit meh towards this one but your others have been safe so far so meh.

Kk, to start, normal methods to detect if the program is being debugged, the only one that poses a threat is ZwQueryInformationProcess. Just download HideOlly plugin and use these settings:

- Tick Auto Run HideOD
- Tick HideNtDebugBit
- Tick Method #1 ZwQueryInformationProcess

Able to run in Olly then. Next..

Dunno what you are doing with winsock as it fails to work apparently everytime I load. The password though:

http://116.32.190.249:8080/

Just like any other, you decrypt a string and just compare. Break here:

Code:
004032C2   .  FF15 90104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCm>;  MSVBVM60.__vbaStrCmp


Check stack for params pushed.
_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
Buggy
Advanced Cheater
Reputation: 0

Joined: 04 Jan 2008
Posts: 72
Location: Republic of Korea (South Korea)
PostPosted: Mon Feb 11, 2008 7:29 am    Post subject: Reply with quote
Wiccaan wrote:
Importing winsock for a crackme.. eh a bit meh towards this one but your others have been safe so far so meh.

Check stack for params pushed.

Oh you finally cracked
I used my webserver to to to to to to NOT CONCENTRATE(?).
hmm a winsock control? i think i have to have a look for my crackme source code...............
_________________

[img]
<a><img></a>[/img]
iroo sooo hooooot
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming -> Crackmes All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites