Download CD-Cops v1.76 Decryptor by Desperate

CD-Cops v1.76 Decryptor
by LaptoniC / DESPERATE
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This unpacker only tested with CD-Cops v1.76 I dont know what will hapen with new versions.
For previous versions use mcLallo's decryptor.

Introduction
~~~~~~~~~~~~
CD-Cops is a copy protection system developed by Link Data Security 
(http://www.linkdata.com).This protection relies on cd layout,date of files,some keys
on the files, to decrypt original exe and run.If CD is protected with CD-Cops;
You will have three files *.EXE  *.W_X *.QZ_ and cdcops.dll ie pr.exe pr.W_X pr.QZ_

.EXE file: It is 16bit NE file which does main CD and debugger checks.After doing checks
it creates reg key named *.CRC and runs .QZ_ file via WinExec.If you forget to load 
icedump it disables keyboard.

.QZ_ file: It is the debugger and decryptor.It loads *.W_X file and it runs it via
ReadProcessMemory,WriteProcessMemory and with some debugging stuff.It checks code and data
sections by only checking their names ie .text CODE for code section, .data and DATA for
data section.

.W_X file:It is the original exe which is crypted.Only code and data sections crypted.


It is my first and only unpacker so the code and logic is very bad.If you see any errors
or bugs please let me know.

Usage
~~~~~
1. Open decryptor,click Decrypt button and choose QZ_ file from the cd.If everything goes
well, savedialog will appear.
2. After decryption change .exe file with decrypted one and burn cd again.

Notes
~~~~~
1. You should have original CD or decryptor may fail.Because decryptor relies on the date
of files if the date is different than CD one, it will fail.
2. They can rename .EXE files to another extension.i.e .HEL like in Vitamin CD.After 
decryption you will change .HEL file with one decrypted.
3. You can detect main exe by looking its header.It has CDCOP50 WINASM string in the header.


Greetings
~~~~~~~~~
First of all, renaTgaD,MbR, and my group mates,CYDONIA
Iczelion, +Tsehp, +Splaj, Kayaker, and all great guys on RCE board, my old friends at PNC 
and PGC, Daemon,The Unknown One and all unpacker authors who are kind to release sources.

LaptoniC 		/ DESPERATE
[email protected]	/ http://kickme.to/desperate

CD-Cops v1.76 Decryptor
Mr_Stop / DESPERATE
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Bu unpacker sadece CD-Cops v1.76 ile test edilmi■tir.Bundan sonraki versiyonlar²nda ne 
oluca≡²n² bilmiyorum.Eski CD-Cops versiyonlar² iτin mcLallo's decryptorunu kullan²n.

Gri■
~~~~~~~~~~~~
CD-Cops Link Data Security (http://www.linkdata.com) taraf²ndan geli■tirilen bir CD
koruma sistemi.Bu koruma sistemi CD iτeri≡ine, dosyalar²n ⁿretilme tarihive ve
dosyalardaki baz² bilgilere ba≡l².E≡er CD korumal² ise ■u ⁿτ dosyaya sahip olman²z 
gerekiyor *.EXE  *.W_X *.QZ_ and cdcops.dll mesela pr.exe pr.W_X pr.QZ_

.EXE dosyas²: Bu 16bit NE dosyas².Bu dosya anti-debug,cd koruma vs gibi ana g÷revleri 
yap²yor. *.CRC isminde bir registry anahtar²olu■turup .QZ_ dosyas²n² WinExec ile 
τal²■t²r²yor.E≡er icedump ² yⁿklemeyi unutursan²z keyboardu disable ediyor.

.QZ_ dosyas²: Bu debugger ve decryptor olarak aτl²■²yor. *.W_X dosyas²n² yⁿkliyip 
ReadProcessMemory,WriteProcessMemory ve baz² debug apileri ile τal²■t²r²yor.Decrypt ederken
k²s²m isimlerine bakarak bu i■i yap²yor.E≡er .text veya CODE ise code, .data veya DATA ise
data olarak i■lem yap²yor.

.W_X file:Bu code ve data k²s²mlar² ■ifrelenemi■ orjinal dosya.


Bu benim ilk ve tek unpacker²m o yⁿzden bir sⁿrⁿ hata olabilir.E≡er hata bulursan²z lⁿtfen
bildirin.

Kullan²m
~~~~~~~~
1. Decryptoru aτ²n ve Decrypt buttonuna t²klay²n.Daha sonra CD den QZ_ dosyas²n² seτin.E≡er
her■ey yolunda giderse save dialo≡u g÷zⁿkecektir.
2. ▌■lem sonunda exe dosyas²n² decrypt etti≡iniz ile de≡i■tirin.

Not
~~~
1. Sizde orjinal CD'nin olmas² gerekmektedir.╟ⁿnkⁿ unpacker dosya zaman²na ba≡l² olarak
τal²■maktad²r.E≡er sizdeki dosyalar²n tarihi CD den farkl² ise decryptor τal²■m²yacakt²r.
2. Programc²lar .exe lerin uzant²lar²n² de≡■tirebilirler.Mesela Vitaminde yapt²klar² gibi
.EXE dosyas²n² .HEL diye de≡i■tirebilirler.▌■lem sonunda .HEL dosyas²n² unpack edilen ile
de≡i■tirmeniz gerekecektir.
3. Exe dosyalar²n²n korumal² oldu≡unu exenin ilk k²sm²na bakarak anl²yabilirsimiz.Ba■²nda
CDCOP50 WINASM stringi olmaktad²r.

Unpacker kaynak kodu zipin iτindedir.

Sevgiler
~~~~~~~~~
▌lk olarak renaTgaD,MbR ve di≡er grup arkada■lar²m,CYDONIA
Iczelion, +Tsehp, +Splaj, Kayaker, RCE boardunda ki yard²msever insanlar,PNC ve PGC deki 
eski arkada■lar²m, Daemon,The Unknown One ve kaynak kodlar²n² da≡²tan bⁿtⁿn unpacker 
yazarlar²

Mr_Stop 		/ DESPERATE
[email protected]	/ http://kickme.to/desperate

                                                            
      ░██            
      ░███░                                                    ░█            
       ░███░                                                   ██            
         ███░                  ██                             ██░            
         ████    ░██    ███    ██░░      ░██   █  █       █░  ██      ░██    
        █████  ░████   ████   ░████░   ░████  █████░   ░████ ██████ ░████    
       ██░░██  ██ ██  ░██    ███████░  ██ ██  ██ ██░  ██░░█░ ░██    ██ ██    
      ██░  ██ ██░███  ░██     ███ ██░ ██░███  ██     ░█░ ██░  ██   ██░███    
      ██  ░█░ █████   ░███    ██░ ██░ █████   ██     ██  ██   ██   █████     
     ░██  ██ ░██       ░███   ██  ██░░██      ██    ░██ ░██   ██  ░██        
     ░██░██░ ░██        ░██   ██ ░██ ░██      ██    ░██░███   ██  ░██        
     ░█████  ░██░█░   █░██   ░██░██  ░██░█░  ░██    ░███░███  ██ ░░██░█░     
      ████    ████    ███   ░█████    ████   ░██    ░██  ██   ███  ████      
       ░░      ░░            ███░      ░░            ░   ░    ░     ░░       
                             ██                                              
                             ██                                              
                             █░                                              
                                                                             
                       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄                      
       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀  DESPERATE TURK CRACKERS  GROUP ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄   
  ▄█▀▀██  █  ▀ ▀ ▀▀▀▀█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█▀▀▀▀▀ ▀ ▀ ▀  █   ▀█ 
 █▀                  █    CD-Cops v1.76 Decryptor        █                  ▀█
 █▀▄ ▄▄              █              LinkData             █          ▀▄ ▄▄   ██
 ▓  ▀  ▀▄▀            ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀             ▀  ▀▄▀ ▓
 ▓                                                                           ▓
 ▒                                                                           ▒
 ░  ┌¢─────────────────────────────┬─────────────────────────────────────¢┐  ░
 ░  │ CRACKER    : Mr_Stop         │ PLATFORM   : Win9x/ME/2k/NT             ░
 ▒  │ DATE       : 10.12.2001      │ PROTECTION : CD-Cops32                  ▒
 ▓  │ CRACK TYPE : Utility         │ URL        : www.linkdata.com       ▓
 ▓  └¢─────────────────────────────┴─────────────────────────────────────¢┘  ▓
 █                                                                           █
 ▀  ▄                                                                      ▄ ▀ 
 ▀█                                                                          █▀
 █ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
 ▄████████████████████  P R O G R A M M E   I N F O   ████████████████████████
 █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
 ▓ This is unpacker for CD-Cops v1.76 for more info read readme.txt          ▓
 ▓                                                                           ▓
 ▓                                                                           ▓
 ▓                                                                           ▓
 ▒                                                                           ▒
 ▓                                                                           ▓
 ▓                                                                           ▓
 █                                                                           █  
 ▀ ▄                                                                      ▄ ▄▀  
 ▀  █                                                                      ▄ █▀
 █ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█ 
 ▄███████████████████████    C R A C K   I N F O    ██████████████████████████
 █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
 ▓                                                                           ▓
 ▓                                                                           ▓
 ▓                                                                           ▓
 ▓                                                                           ▓
 █                                                                           █
 ▀  ▄                                                                      ▄ ▀
 ▀ █                                                                      ▄ ▄█▀ 
 █ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█   
 ▄██████████████████████     G R O U P   N E W S     █████████████████████████  
 █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  
 ▓                                                                           ▓
 ▓      Desperate Group [DTCG] is a reverse engineers group composed         ▓
 ▓    of Turkish crackers. Our Group's aim is helping with quality           ▓
 ▓    cracks to other Turkish users and everyone worldwide & also            ▓
 ▒    contributing in the development of better software.                    ▒
 ▒     You may request cracks by visiting our website's request part.        ▒
 ▒                    (We do NOT crack for money!)                           ▒
 ░               ----------------°---°---°----------------                   ░
 ░      If you are capable of cracking we would like to see you in           ░
 ░    our group. To join, you should at least have some ASM knowledge        ░
 ░    and/or have control over a programming language (C, Delphi etc.)       ░
 ░    Your talent is not much important but lamerz are not allowed!          ░
 ▒    If you want to join go to our website and you'll find the further      ▒
 ▒    info on the group link. (We also need suppliers)                       ▒
 ▒              ----------------°---°---°----------------                    ▒
 ▓      Also we are looking for a webmaster. He/she should be capable        ▓
 ▓    of dealing with Html 4.x, PHP, MySQL, Flash, CSS and/or CGI, PERL.     ▓
 ▓    The webmaster will not only design our site but he/she will also       ▓
 ▓    work on the crack database. Because of this that person should be      ▓
 █    familiar with database managing.                                       █
 ▄                                                                           █
 ▀ ▄ ▄                                                                   ▄   ▀
 ▀█ ▄                                                                      █ █▀
 █ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█  
 ▄██████████████████████████████ M E M B E R S ███████████████████████████████ 
 ██▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ▀▀▀█
 ▄▀                       Mr_Stop, renaTgaD, MUMisoft                        █ 
 ▀ ▄                     codeFINgER, ASA, MbR, RvaZero                     ▄ █▀
 ▀█                                                                         █ █▀ 
 █ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ █ 
 ▄██████████████████████████████ C O N T A C T ███████████████████████████████  
 ██▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  
 █                 IRC   : #Desperate & #DTCG - irc.ada.net.tr                █
 ▄▀                WWW   : Http://kickme.to/desperate                         █
 ▀ ▄                                                                         █▀
 ▀█ ▀                                                                       ██▀
  ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀ 
                                                                                
                       Best viewed in Terminal Font.