Cheat Engine

[spectrum]

Well in this one i tried to implement what you guys told me in the other thread, i made encryptions (I hope =P) and used hex.
Also i didn't encrypt so much the second password cause the ones that can get ok the first one can get ok the second one without much effort, and i wont make you work for somethng not very important.
http://www.mediafire.com/?9mjbex4y99y
good luck, even you wont need it.

[Symbol]

First Password - Anything.
Second Password - 5th character+15 (0xF) should be the same as first character of the first password+11 (0xB)

For example:
The ASCII of '0' is 0x30, so add to the first character of the first password 11 (0xB) it would be 0x3B, which is semi-colon ';'.
Now add 15 (0xF) to the 5th character of the second password, so to get 0x3B we do 0x3B-0xF = 0x2C (comma ',')

Simply take a random number, I took 0x3B and decrased it by 11 for first character of the first password and decrased by 15 for the 5th character for the second password.

Now there's another check:
Add 11 to the 5th character of the second password, in this example I used comma (0x2C) so it results 0x37 ('7') and then add 10 to the 4rd character of the first password, then compare these 2, so simply take 0x37 and decrase by 0xA, thats 0x2D ('-') and then... there's another check!

Add 12 (0xC) to the 4rd character of the first password and compare it to the first character of second password.

Simply add 12 to '-' (0x2D) which is 0x39, then decrase by 10 (because we add 10 later) which is 0x2F. ('/')
Then the first character of the second password should be '/', because then we add 0xA (10) to 0x2F which is 0x39, which is also 0x2D ('-') + 12.

We got now:
0**-*
/***,

* = wild card.

And finally, the last check...
It doesn't check the ASCII, it checks the a 4 bytes value of the 8th character of the second password. (characters 8, 9, 10 and 11)
It compares it to 0x108 (0x00000108), so only the 8th and 9th characters are needed. (and 10 and 11 are null - 0)
8th character ASCII should be 08 and the 9th should be 01.
Not sure which characters are 01 and 08, so I have to change them manualy using ollydbg.

I typed:
0**-*
/***,__55

we're gonna change 55 to 01 and 08 manually.
Set a breakpoint at 401483 and go in the hex dump to 44301C.
type the passwords above and press enter.
Now we break at 401483, in the hex dump I edit the first byte (untick "Keep size") and type 08 01 00 00.

Cracked.

Wasn't hard, just annoying.

[Heartless]

Is there anything you can't crack!

[spectrum]

[Symbol]

Because the 2nd password (characters 1, 4, 8 and 9) are relative to the first password. (characters 1 and 4)

You could change everything to something else, for example 0 (0x30) to 1 (0x31) and then add every character ASCII by 1.

"ADD EAX,0A" isn't really encrypting the password, sorry.

[Labyrnth]

Well, dang the site linked is 404.....
Must be real busy right now or something

[spectrum]

also when i tried to increase a value with a high hex like 0xea7e it said that integers can't be compared to pointers blahblah, any help?

[Symbol]

Show your code?

[spectrum]

[Symbol]

else goto wrong;
wrong:
?! O_O

Anyway, it works fine...

[spectrum]

could it be because the compiler? im using dev c++

[Symbol]

Maybe it thinks you're pointing to an address in the memory if you use a 2 bytes number.
Try MVC++.

[spectrum]

I always get errors at compiling in mvc++, even with the hello world program THEY set as default
it says:
.\xtest.cpp(3) : fatal error C1083: Cannot open precompiled header file: 'Debug\test.pch': No such file or directory

[Symbol]

Try unticiking 'precompiled header' checkbox. (when you make a new application, click next and untick)

[SunBeam]

Am preparing a nice surprise for y'allz. It comes with custom protection and a small protector (maybe packer). Wanna see who manages to do the dirty work and trace his way to the "good_boy"