Cheat Engine

DeletedUser14087 · Posted: Sun Sep 23, 2007 6:12 am Post subject: CrackMe, Talix and zart

Try this:

Here

DeletedUser14087 · Posted: Sun Sep 23, 2007 6:19 am Post subject:

DeletedUser14087 · Posted: Sun Sep 23, 2007 6:21 am Post subject:

DeletedUser14087 · Posted: Sun Sep 23, 2007 6:22 am Post subject:

DeletedUser14087 · Posted: Sun Sep 23, 2007 6:34 am Post subject:

zart · Posted: Sun Sep 23, 2007 8:40 am Post subject:

Enabling it was easy, just like Talix's just delphi code instead of vb.

Your comparing the string entered to "ButtonOfMagic" - though you don't actually do anything on StrCmp true or false.

Whats the point of this again?

If no one understands how to patch it to be visible let me know.

zart · Posted: Sun Sep 23, 2007 8:46 am Post subject:

atom0s · Posted: Sun Sep 23, 2007 8:59 am Post subject:

You could also patch the param for the window style when SetWindowPos is called.

Change:
:00434618 6A00 push 00000000

To:
:00434618 6A00 push 00000002

Which will get the form to show at startup.

zart · Posted: Sun Sep 23, 2007 9:03 am Post subject:

Hmmm, yea there are a bunch of ways. I did the following;

NOP out 0044F0C2

Change the push 0 to push 1 which changes it from SW_HIDE to SW_SHOWNORMAL

0044F0C8 . 6A 01 PUSH 1 ; /ShowState = SW_SHOWNORMAL

DeletedUser14087 · Posted: Mon Sep 24, 2007 5:11 am Post subject:

SunBeam · Posted: Mon Sep 24, 2007 6:49 am Post subject:

I vote for Wiccaan mayor! I'd have used the same method Wink

Params FTW!

DeletedUser14087 · Posted: Mon Sep 24, 2007 6:57 am Post subject:

Zand · Posted: Mon Sep 24, 2007 9:41 am Post subject:

Bet Kaspersky's pissed he can't pack his crackmes anymore.

atom0s · Posted: Mon Sep 24, 2007 3:03 pm Post subject:

DeletedUser14087 · Posted: Tue Sep 25, 2007 5:55 am Post subject: