Web : http://mxb.cjb.net
Contact Me : [email protected] or [email protected]

Main | Index

ZipMagic 1.0

Type : Datacompression Utility
Protection : Date Check
Tech : Runtime Patching


Crack : This program is a tool from PowerDesk.Both PowerDesk Utilities
and ZipMagic uses the API CALL WRITEPROCESSMEMORY to fill its code at
run time.
So our attack point is this API.So in SICE BPX WRITEPROCESSMEMORY
Now start the program..and trace after this API CALL.

0x4435CA CALL EDI
.................
0x4435D3 0x443623 >> GOOD BOY

0x443716 CALL 0x442740 >> COUNT NO: OF DAYS USED IN EAX
SO CLEAR EAX
0x44371B ADD ESP,18 >> RESTORE STACK
0x44372B JGE 0x443796 >> GOOD BOY

Above code is only filled at runtime so you must find a place after
the WRITEPROCESSMEMORY API and place patching code.
I am not doing this ...too lazy :)