How to find serial for 

massh^Cookie Crackme0

Written by tnHuAn

Ok, As I say, I will show you how to find correct serial of massh^Cookie Crackme0. This is a funny crackme. I hope you will have fun when you crack it.

NOTE : This crackme only work in Win9x, so You must have Win9X if you want to run it.

Now, Let 's crack it.Here we go......

• SoftIce ( I used version 4.05 for Win9X ).
• A paper and a pen.
• Some music from Andy Law CD ( I love his song :) 
• Some food.( Hungry...)

You can find all tool at : http://crackpltools.prv.pl and at your home.

    http://Crackmes.prv.pl

Essay

Now, run this crackme, you will see a textbox , you will enter correct serial if you want to register this crackme. Ok , You will enter fake password : 123456789, but don't click 'OK' button , now press Ctrl+D, to pop up SoftIce, set a breakpoint at GetDlgItemtextA, so type : bpx GetDlgItemtextA, press Enter, then Press F5 to return this crackme, and Click OK. Oh you are in SoftIce, now use F12 and F10 to trace code, until you see this code :

• Call    User32!SendDlgItemMessageA
• Mov   Edi, 0040208A
• Call    00401138
• Text   Eax, Eax
• Jz       0040110D

Ok, look at this code, when you at the line : Call 00401138, press F8 to trace into the Call, and you will see this code :

• Xor    Eax, Eax
• Sub    DWORD PTR [Edi], 79726556
• Jnz     00401159
• Add   Edi, 04 
• Sub    DWORD PTR [Edi], 6F6F6720
• Jnz     00401159
• Add    Edi, 04
• Sub    DWORD PTR [Edi], 293A2064
• Jnz     00401159

Well, look the code, at the first line , type : d Edi, you will see your fake password, hmm in SoftIce, you type : 

• ? 79726556 --> you will see : yreV--> Reverse : Very
• ? 6F6F6720--> you will see : oog  --> Reverse : goo 
• ? 293A2064--> you will see : ): d  --> Reverse : d :)

Ok, merge all , and I have a string : Very good :) 

And this string is correct password. That is all....

This crackme is a funny crackme, When I cracked it, I have some fun. I hope you will

have fund when you crack it. Commect me? Please email :

tnhuan19@hotmail.com