Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-12-2004, 00:29
abccc
 
Posts: n/a
a newbie question about CRC32

how can we patch a program protected with CRC32.. is there any tools out thier can remove this kind of protection .. please help..
Reply With Quote
  #2  
Old 04-12-2004, 18:07
dyn!o's Avatar
dyn!o dyn!o is offline
Friend
 
Join Date: Nov 2003
Location: Own mind
Posts: 214
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 8
Thanks Rcvd at 0 Times in 0 Posts
dyn!o Reputation: 1
CRC32 is not a protection itself but simply checksum algorithm.

If you have found that your soft uses CRC32 and don't know how to locate and eliminate the verification code then I suggest to use a loader instead of patching.
Reply With Quote
  #3  
Old 04-13-2004, 02:07
abccc
 
Posts: n/a
thankz for your reply dyn!o .. I used (Krypto ANALyzer) which list this thing

CRC32::00191B68::00593168
|-Referenced at 00481C8C
|-Referenced at 00481CAC
|-Referenced at 00481CC7
|-Referenced at 00481CE3
|-......................

if that what you ment by locating the code Now what the next step.. to eliminate the verification code..

best regards..
Reply With Quote
  #4  
Old 04-14-2004, 13:51
Sergey R.
 
Posts: n/a
Quote:
Originally Posted by abccc
how can we patch a program protected with CRC32.. is there any tools out thier can remove this kind of protection ..
Read the article "CRC and how to Reverse it" by Anarchriz/DREAD
_http://www.xs4all.nl/~koekeroe/hacked/crc.htm
If you find where CRCvalue is stored in your program you could change it to required value after program patching.
Reply With Quote
  #5  
Old 04-16-2004, 19:10
abccc
 
Posts: n/a
Thankz a lot Sergey R. ..it is such along essay thoo
Reply With Quote
  #6  
Old 04-19-2004, 00:24
abccc
 
Posts: n/a
sorry.. but it seems hard to understand ....is there a tool to remove or recalculate or correct CRC32 for me.. I appreciated your help
Reply With Quote
  #7  
Old 04-19-2004, 01:56
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
use PEiD CRC32 Plugin
Reply With Quote
  #8  
Old 04-20-2004, 04:50
abccc
 
Posts: n/a
thankz alot for your reply MaRKuS-DJM .. could you please explain what you mean..

I used (Krypto ANALyzer) which list this information

CRC32::00191B68::00593168
|-Referenced at 00481C8C
|-Referenced at 00481CAC
|-Referenced at 00481CC7
|-Referenced at 00481CE3
|-......................

now what next..I realy appreciated your help..
Reply With Quote
  #9  
Old 04-20-2004, 05:19
ancev
 
Posts: n/a
abccc,

in my page, you can find a tool called crc48fix.zip, that allow you make any file match a given crc16, 32 and 48

vecna
Reply With Quote
  #10  
Old 04-20-2004, 05:34
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 96 Times in 94 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
It might help if you said "where" your page might be found.

Regards,
__________________
JMI
Reply With Quote
  #11  
Old 04-21-2004, 03:46
ancev
 
Posts: n/a
Arrow

jmi,

its in my user profile in the board. i thought it show up in my post. anyway, its at http://infamy.host.sk

vecna/29a
Reply With Quote
  #12  
Old 04-21-2004, 05:07
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 96 Times in 94 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
qwerty3 and ancev:

ancev:

It is always good to acknowledge one's own errors and learn from them, if that is possibe. ancev I did look at your profile here, but forgot to look at the entire page and didn't see the "home page" which was clearly listed. So the best I can say for myself is "Well duh!"

Actually, I really wasn't looking for the file CRC48fix.zip itself, because, strangely enough, I had actually downloaded it from that Woodmann post back in 2002. I was trying to find a location for others who might have been interested, because I didn't remember "where" I had gotten it and I didn't want to add an attachment if the place to download could be easily found. As you may know, I am a Moderator there also and make a habit of downloading all the attachments that look even slightly interesting, and I also have copies of all of them in the backups of the Board.

However it is curious that your google search turned up that thread and my own, both before I posted and just again now, turns up nothing. I have noticed, in conversation with some members of the Woodmann Forum that those using "google" searches in other countries do obtain different result than what I receive here is the U.S. Don't know if that is the issue or if you said "google" and may actually have used some "other" seach engine. But it still isn't showing up here. Dont' know why it works for you and I get nothing at all.

Regards,
__________________
JMI
Reply With Quote
  #13  
Old 04-23-2004, 00:34
abccc
 
Posts: n/a
I found a nice tool PEiD CRC32 Plugin (thanks MaRKuS-DJM )

hxxp://www.secretashell.com/codomain/peid/plugins/crc32-gelios.zip

can anybody tell me where from to get new crc..

regards
Reply With Quote
  #14  
Old 04-23-2004, 03:13
dainis
 
Posts: n/a
CRC links:
http://www.gweep.net/~prefect/eng/reference/crc_v3.txt
http://www.repairfaq.org/filipg/LINK/F_crc_v3.html
http://www.ross.net/crc/links.html
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
one newbie question SubzEro General Discussion 7 03-12-2015 06:05
HELP, CRC32 Mitchjs General Discussion 8 07-04-2004 01:20
Newbie question ASPR 1.23 RC4 (long!) Wurstgote General Discussion 126 02-27-2004 11:41
"newbie" question for crackers ;) newbie007 General Discussion 4 10-07-2003 04:46


All times are GMT +8. The time now is 17:43.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )