Web : http://mxb.cjb.net
Contact Me : [email protected] or [email protected]

Main | Index

js Editor 95 - 1.5001

Type : Java Script Editor
Protection : One Way
Tech : Patching


Crack : It uses OneWay to protect.But it uses a single flag to see if registered or
not.We will see where it calls OneWay to validate S/N.

Enter fake S/N and in SICE - BPX HMEMCPY

Main CALL ...

0x4BB323 CALL 4BAED4
0x4BB328 TEST AL,AL ==> IF AL = 01 --- REGISTERED
0x4BB32A JZ 4BB3C6

Inside this CALL ...

0x4BAED4 JMP [50B8F4] ----- JUMP TO 1WAY CODE SECTION -- BPX HERE

Now restart jsEditor with BPX 4BAED4 enabled.
When we break at this point trace back to see from where it was called.
We can see it calls it 3 times.

0x4BB241 CALL 4BAED4
0x4BB246 TEST AL,AL
0x4BB248 JNZ 4BB254 --- GOOD BOY
.............................
0x4BB25E CALL 4BAED4
0x4BB263 MOV [0050A9D8],AL ---> SAVE FLAG
.........................................
0x4BB6E3 CALL 4BAED4
0x4BB6E8 TEST AL,AL
0x4BB6EA JZ 4BB74A --- GOOD BOY

Now this can be easily patched ...