View Single Post
  #8  
Old 21-02-2003, 10:34
schlaufer's Avatar
schlaufer schlaufer is offline
Registered User
 
Join Date: Feb 2001
Location: Eeiauo
Posts: 92
Thanks: 0
Thanked 0 Times in 0 Posts
schlaufer
Send a message via ICQ to schlaufer
Hi,
this is the crack that I used that time. I don't remeber the source, sorry. If this is not enough information for u to patch your exe, send me your email addi and I will send you the .exe.
Quote:
================================================== ====================
--------------------------------HermeS--------------------------------
forever - because knowledge is power

vainly presents

Icewind Dale HoW - Trials of the Luremaster v1.42 (062714) - No CD

================================================== ====================
Supplier/Courier: http://www.interplay.com/icewind/
Stripper/Ripper: N/A
Hacker/Cracker: Tegné
Packager: Tegné
================================================== ====================
--------------------------Installation Notes--------------------------

Do a full install of Icewind Dale & Heart of Winter add-on. D/L &
apply Trials of the Luremaster (73 meg). Copy the crack to your
installed directory & execute.

Code:
======================================================================
-----------------------------Hacking Notes----------------------------
 
Icewind Dale - HoW - Trials of the Luremaster v1.42 (062714)
File:  idmain.exe


* Possible Reference to String Resource ID=00005: "This program needs 
to run in 
Direct Draw Exclusive Mode

Pl"
                                  |
:0043CCE2 C745FC05000000          mov [ebp-04], 00000005
:0043CCE9 8D4D90                  lea ecx, dword ptr [ebp-70]
:0043CCEC E8799A5000              call 0094676A
:0043CCF1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043CCF8 8D4D8C                  lea ecx, dword ptr [ebp-74]
:0043CCFB E83E715800              call 009C3E3E
:0043CD00 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043CD03 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043CD0A 8BE5                    mov esp, ebp
:0043CD0C 5D                      pop ebp
:0043CD0D C20C00                  ret 000C


:0043CD10 55                      push ebp
:0043CD11 8BEC                    mov ebp, esp
:0043CD13 51                      push ecx
:0043CD14 894DFC                  mov dword ptr [ebp-04], ecx
:0043CD17 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CD1A C6808A47000000          mov byte ptr [eax+0000478A], 00
:0043CD21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043CD24 C6818B47000000          mov byte ptr [ecx+0000478B], 00
:0043CD2B 8B55FC                  mov edx, dword ptr [ebp-04]
:0043CD2E C6829047000000          mov byte ptr [edx+00004790], 00
:0043CD35 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CD38 C6809147000000          mov byte ptr [eax+00004791], 00
:0043CD3F 8BE5                    mov esp, ebp
:0043CD41 5D                      pop ebp
:0043CD42 C3                      ret



* Referenced by a CALL at Addresses:
|:006D3C44   , :006D3DF5   
|
-->:0043CD43 55                      push ebp     ; change to B8
-->:0043CD44 8BEC                    mov ebp, esp ; change to 0100 
-->:0043CD46 6AFF                    push FFFFFFFF; change to 0000
-->:0043CD48 68AEF99C00              push 009CF9AE; change to C3
:0043CD4D 64A100000000            mov eax, dword ptr fs:[00000000]
:0043CD53 50                      push eax
:0043CD54 64892500000000          mov dword ptr fs:[00000000], esp
:0043CD5B 83EC5C                  sub esp, 0000005C
:0043CD5E 894D9C                  mov dword ptr [ebp-64], ecx
:0043CD61 A1E85EA800              mov eax, dword ptr [00A85EE8]
:0043CD66 8945F0                  mov dword ptr [ebp-10], eax
:0043CD69 C745FC00000000          mov [ebp-04], 00000000
:0043CD70 8B0DE85EA800            mov ecx, dword ptr [00A85EE8]
:0043CD76 894DE0                  mov dword ptr [ebp-20], ecx
:0043CD79 C645FC01                mov [ebp-04], 01
:0043CD7D 8B559C                  mov edx, dword ptr [ebp-64]
:0043CD80 33C0                    xor eax, eax
:0043CD82 8A8291470000            mov al, byte ptr [edx+00004791]
:0043CD88 83F801                  cmp eax, 00000001
:0043CD8B 7527                    jne 0043CDB4
:0043CD8D C645B801                mov [ebp-48], 01
:0043CD91 C645FC00                mov [ebp-04], 00
:0043CD95 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0043CD98 E8A1705800              call 009C3E3E
:0043CD9D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043CDA4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0043CDA7 E892705800              call 009C3E3E
:0043CDAC 8A45B8                  mov al, byte ptr [ebp-48]
:0043CDAF E9F5020000              jmp 0043D0A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD8B(C)
|
:0043CDB4 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0043CDB7 C6819147000000          mov byte ptr [ecx+00004791], 00

* Reference To: KERNEL32.GetLogicalDrives, Ord:0120h
                                  |
:0043CDBE FF1538B3A000            Call dword ptr [00A0B338]
:0043CDC4 8945DC                  mov dword ptr [ebp-24], eax
:0043CDC7 C645E400                mov [ebp-1C], 00
:0043CDCB EB09                    jmp 0043CDD6
 
======================================================================
Reply With Quote