Skip to content

Instantly share code, notes, and snippets.

@maboloshi
Last active November 14, 2024 00:05
Show Gist options
  • Save maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47 to your computer and use it in GitHub Desktop.
Save maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47 to your computer and use it in GitHub Desktop.
Crack Sublime Text and Sublime Merge

Note

  1. If you can, please purchase the genuine license through the official channel and support the software developer.
  2. All crack methods here are implemented by @leogx9r.
  3. All data is not guaranteed to be authoritative or correct, nor has it been tested across the platform, nor is it responsible for any errors, lost data, etc. in practice! Please assess yourself!!!
  4. I am only within the ability to update the information based on the existing crack methods until the existing rules fail.

Sublime Patcher Script for personal use

The code implementation is very poor.
https://gist.github.com/maboloshi/5baecbddacf43855f13240b63be5673d

ToC

Sublime Text Sublime Merge
Stable channel win / linux / mac / mac-arm64 win / linux / mac / mac-arm64
Dev channel win / linux / mac / mac-arm64 win / linux / mac / mac-arm64

How to Crack Sublime Text, Stable Channel, Build 4152

Thanks to @leogx9r for providing cracking methods.

https://gist.github.com/JerryLokjianming/71dac05f27f8c96ad1c8941b88030451?permalink_comment_id=3762200#gistcomment-3762200 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3802197#gistcomment-3802197 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3803204#gistcomment-3803204

Win64

Desciption Offset Original Patched
Initial License Check 0x000A8D78 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x000071D0 E8 17 FE 20 00 90 90 90 90 90
Persistent License Check 2 0x000071E9 E8 FE FD 20 00 90 90 90 90 90
Disable Server Validation Thread 0x000AAB3E 55 56 57 48 83 EC 30 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x000A8945 55 C3
Disable Crash Reporter 0x00000400 41 C3

for 4117, 4118: https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3927712#gistcomment-3927712

Bat Script
:: for Win64
cd /d "C:\Program Files\Sublime Text" || exit
certutil -hashfile sublime_text.exe md5 | find /i "15BB398D5663B89A44372EF15F70A46F" || exit
echo 000A8D78: 48 31 C0 C3          | xxd -r - sublime_text.exe
echo 000071D0: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 000071E9: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 000AAB3E: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text.exe
echo 000A8945: C3                   | xxd -r - sublime_text.exe
echo 00000400: C3                   | xxd -r - sublime_text.exe

PS:xxd.exe extracted from git for windows

The license can be any string.

Blocked by Microsoft Defender SmartScreen -> More Info -> Run Anyway

Screenshot
![Screenshot](https://i.imgur.com/t4QlRZ6.png)

![Screenshot](https://i.imgur.com/18372Rh.png)

Linux

Desciption Offset Original Patched
Initial License Check 0x00415013 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x00409037 E8 C0 CC 12 00 90 90 90 90 90
Persistent License Check 2 0x0040904F E8 A8 CC 12 00 90 90 90 90 90
Disable Server Validation Thread 0x00416CA4 55 41 56 53 41 89 F6 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x00414C82 41 C3
Disable Crash Reporter 0x003FA310 55 C3
Bash Script
# for Linux
cd /opt/sublime_text || exit
md5sum -c <<<"7038C3B1CC79504602DA70599D4CCCE9  sublime_text" || exit
echo 00415013: 48 31 C0 C3          | xxd -r - sublime_text
echo 00409037: 90 90 90 90 90       | xxd -r - sublime_text
echo 0040904F: 90 90 90 90 90       | xxd -r - sublime_text
echo 00416CA4: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 00414C82: C3                   | xxd -r - sublime_text
echo 003FA310: C3                   | xxd -r - sublime_text

macOS

Desciption Offset Original Patched
Initial License Check 0x0009F313 55 48 89 E5 48 31 C0 C3
Persistent License Check 1 0x00009CEF E8 3C 2D 13 00 90 90 90 90 90
Persistent License Check 2 0x00009D07 E8 24 2D 13 00 90 90 90 90 90
Disable Server Validation Thread 0x000A085D 55 48 89 E5 41 57 41 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0009EF0E 55 C3
Disable Crash Reporter 0x00002A87 55 C3
Bash Script
# for MacOS
cd "/Applications/Sublime Text.app/Contents/MacOS/" || exit
md5 -q sublime_text | grep -i "B07FDB3A228A46DF1CC178FE60B64D3B" || exit
echo 0009F313: 48 31 C0 C3          | xxd -r - sublime_text
echo 00009CEF: 90 90 90 90 90       | xxd -r - sublime_text
echo 00009D07: 90 90 90 90 90       | xxd -r - sublime_text
echo 000A085D: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 0009EF0E: C3                   | xxd -r - sublime_text
echo 00002A87: C3                   | xxd -r - sublime_text
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Text.app"

Requires Apple Command Line Tools to be installed

macOS (ARM64)

Based on: https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3929427#gistcomment-3929427

Desciption Offset Original Patched
Initial License Check 0x01060C90 FC 6F BA A9 E6 03 1E AA E0 03 1F AA C0 03 5F D6
Persistent License Check 1 0x00FEAD18 40 BB 03 94 1F 20 03 D5
Persistent License Check 2 0x00FEAD2C 3B BB 03 94 1F 20 03 D5
Disable Server Validation Thread 0x01061F28 F6 57 BD A9 C0 03 5F D6
Disable License Notify Thread 0x01060908 FC 6F BD A9 C0 03 5F D6
Disable Crash Reporter 0x00FE5780 FC 6F BC A9 C0 03 5F D6
Bash Script
# for macOS (ARM64)
cd "/Applications/Sublime Text.app/Contents/MacOS/" || exit
md5 -q sublime_text | grep -i "B07FDB3A228A46DF1CC178FE60B64D3B" || exit
echo 01060C90: E0 03 1F AA C0 03 5F D6 | xxd -r - sublime_text
echo 00FEAD18: 1F 20 03 D5             | xxd -r - sublime_text
echo 00FEAD2C: 1F 20 03 D5             | xxd -r - sublime_text
echo 01061F28: C0 03 5F D6             | xxd -r - sublime_text
echo 01060908: C0 03 5F D6             | xxd -r - sublime_text
echo 00FE5780: C0 03 5F D6             | xxd -r - sublime_text
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Text.app"

Requires Apple Command Line Tools to be installed


How to Crack Sublime Text, Dev Channel, Build 4154

Thanks to @leogx9r for providing cracking methods.

https://gist.github.com/JerryLokjianming/71dac05f27f8c96ad1c8941b88030451?permalink_comment_id=3762200#gistcomment-3762200 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3802197#gistcomment-3802197 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3803204#gistcomment-3803204

Win64

Desciption Offset Original Patched
Initial License Check 0x0009E47C 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x0000647C E8 23 7C 20 00 90 90 90 90 90
Persistent License Check 2 0x00006495 E8 0A 7C 20 00 90 90 90 90 90
Disable Server Validation Thread 0x000A0222 55 56 57 48 83 EC 30 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0009E043 55 C3

for 4117, 4118: https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3927712#gistcomment-3927712

Bat Script
:: for Win64
cd /d "C:\Program Files\Sublime Text" || exit
certutil -hashfile sublime_text.exe md5 | find /i "ADF277D39672D83637AB708FC45413C8" || exit
echo 0009E47C: 48 31 C0 C3          | xxd -r - sublime_text.exe
echo 0000647C: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 00006495: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 000A0222: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text.exe
echo 0009E043: C3                   | xxd -r - sublime_text.exe

PS:xxd.exe extracted from git for windows

The license can be any string.

Blocked by Microsoft Defender SmartScreen -> More Info -> Run Anyway

Screenshot
![Screenshot](https://i.imgur.com/t4QlRZ6.png)

![Screenshot](https://i.imgur.com/18372Rh.png)

Linux

Desciption Offset Original Patched
Initial License Check 0x00443F94 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x0042B210 E8 37 44 14 00 90 90 90 90 90
Persistent License Check 2 0x0042B228 E8 1F 44 14 00 90 90 90 90 90
Disable Server Validation Thread 0x00445EB6 55 41 56 53 41 89 F6 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x00443BF8 41 C3
Bash Script
# for Linux
cd /opt/sublime_text || exit
md5sum -c <<<"8836FE092DBB7BC8D3D2375D34510CA9  sublime_text" || exit
echo 00443F94: 48 31 C0 C3          | xxd -r - sublime_text
echo 0042B210: 90 90 90 90 90       | xxd -r - sublime_text
echo 0042B228: 90 90 90 90 90       | xxd -r - sublime_text
echo 00445EB6: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 00443BF8: C3                   | xxd -r - sublime_text

macOS

Desciption Offset Original Patched
Initial License Check 0x0009D527 55 48 89 E5 48 31 C0 C3
Persistent License Check 1 0x000097F5 E8 AE 12 13 00 90 90 90 90 90
Persistent License Check 2 0x0000980D E8 96 12 13 00 90 90 90 90 90
Disable Server Validation Thread 0x0009EA9D 55 48 89 E5 41 57 41 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0009D122 55 C3
Bash Script
# for MacOS
cd "/Applications/Sublime Text.app/Contents/MacOS/" || exit
md5 -q sublime_text | grep -i "E1A3347BECDA7CC1EF583ECACECACBDC" || exit
echo 0009D527: 48 31 C0 C3          | xxd -r - sublime_text
echo 000097F5: 90 90 90 90 90       | xxd -r - sublime_text
echo 0000980D: 90 90 90 90 90       | xxd -r - sublime_text
echo 0009EA9D: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 0009D122: C3                   | xxd -r - sublime_text
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Text.app"

Requires Apple Command Line Tools to be installed

macOS (ARM64)

Based on: https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3929427#gistcomment-3929427

Desciption Offset Original Patched
Initial License Check 0x010758B8 FC 6F BA A9 E6 03 1E AA E0 03 1F AA C0 03 5F D6
Persistent License Check 1 0x01000360 33 A4 03 94 1F 20 03 D5
Persistent License Check 2 0x01000374 2E A4 03 94 1F 20 03 D5
Disable Server Validation Thread 0x01076B54 F6 57 BD A9 C0 03 5F D6
Disable License Notify Thread 0x01075534 FC 6F BD A9 C0 03 5F D6
Bash Script
# for macOS (ARM64)
cd "/Applications/Sublime Text.app/Contents/MacOS/" || exit
md5 -q sublime_text | grep -i "E1A3347BECDA7CC1EF583ECACECACBDC" || exit
echo 010758B8: E0 03 1F AA C0 03 5F D6 | xxd -r - sublime_text
echo 01000360: 1F 20 03 D5             | xxd -r - sublime_text
echo 01000374: 1F 20 03 D5             | xxd -r - sublime_text
echo 01076B54: C0 03 5F D6             | xxd -r - sublime_text
echo 01075534: C0 03 5F D6             | xxd -r - sublime_text
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Text.app"

Requires Apple Command Line Tools to be installed


How to Crack Sublime Merge, Stable Channel, Build 2083

Thanks to @leogx9r for providing cracking methods.

https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3823090#gistcomment-3823090 https://gist.github.com/JerryLokjianming/71dac05f27f8c96ad1c8941b88030451?permalink_comment_id=3762883#gistcomment-3762883 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3802197#gistcomment-3802197

Win64

Desciption Offset Original Patched
Initial License Check 0x000251A8 55 41 57 41 56 41 55 41 48 C7 C0 19 01 00 00 C3
Persistent License Check 1 0x000286A3 E8 70 AA 26 00 90 90 90 90 90
Persistent License Check 2 0x000286BC E8 57 AA 26 00 90 90 90 90 90
Disable Server Validation Thread 0x000269B8 55 56 57 48 83 EC 30 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x00024DCD 55 C3
Disable Crash Reporter 0x00023F18 41 C3
Bat Script
:: for Win64
cd /d "C:\Program Files\Sublime Merge" || exit
certutil -hashfile sublime_merge.exe md5 | find /i "E33B76ADA6E7E7577CD4E81A7A4580C7" || exit
echo 000251A8: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge.exe
echo 000286A3: 90 90 90 90 90          | xxd -r - sublime_merge.exe
echo 000286BC: 90 90 90 90 90          | xxd -r - sublime_merge.exe
echo 000269B8: 48 31 C0 48 FF C0 C3    | xxd -r - sublime_merge.exe
echo 00024DCD: C3                      | xxd -r - sublime_merge.exe
echo 00023F18: C3                      | xxd -r - sublime_merge.exe

PS:xxd.exe extracted from git for windows

Linux

thinks @urxi here

Bash Script
# for Linux
cd /opt/sublime_merge || exit
md5sum -c <<<"86F61A82E7EE8DD9BDC4CF16A7C8E825  sublime_merge" || exit
echo 0045A360: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge
echo 0045D21D: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0045D23A: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0045B990: C3                      | xxd -r - sublime_merge
echo 0045A05A: C3                      | xxd -r - sublime_merge
echo 00459ABA: C3                      | xxd -r - sublime_merge

macOS

Desciption Offset Original Patched
Initial License Check 0x0002C2DF 55 48 89 E5 41 57 41 56 48 C7 C0 19 01 00 00 C3
Persistent License Check 1 0x0002E96C E8 1F B9 18 00 90 90 90 90 90
Persistent License Check 2 0x0002E98B E8 00 B9 18 00 90 90 90 90 90
Disable Server Validation Thread 0x0002D295 55 48 89 E5 41 57 41 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0002BF6A 55 C3
Disable Crash Reporter 0x0002B7AB 55 C3
Bash Script
# for MacOS
cd "/Applications/Sublime Merge.app/Contents/MacOS/" || exit
md5 -q sublime_merge | grep -i "B1AADED4F196EEEEBF8D5A6F98B11288" || exit
echo 0002C2DF: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge
echo 0002E96C: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0002E98B: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0002D295: 48 31 C0 48 FF C0 C3    | xxd -r - sublime_merge
echo 0002BF6A: C3                      | xxd -r - sublime_merge
echo 0002B7AB: C3                      | xxd -r - sublime_merge
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Merge.app"

Requires Apple Command Line Tools to be installed

macOS (ARM64)

!!!! May have expired !!!!

Based on:

Desciption Offset Original Patched
Initial License Check 0x014D9060 FC 6F BA A9 E6 03 1E AA E0 03 1F AA C0 03 5F D6
Persistent License Check 1 0x014DAF68 AB B6 04 94 1F 20 03 D5
Persistent License Check 2 0x014DAF7C A6 B6 04 94 1F 20 03 D5
Disable Server Validation Thread 0x014D9DBC F6 57 BD A9 C0 03 5F D6
Disable License Notify Thread 0x014D8D9C FC 6F BD A9 C0 03 5F D6
Disable Crash Reporter 0x014D86E4 FC 6F BC A9 C0 03 5F D6
Bash Script
# for macOS (ARM64)
cd "/Applications/Sublime Merge.app/Contents/MacOS/" || exit
md5 -q sublime_merge | grep -i "B1AADED4F196EEEEBF8D5A6F98B11288" || exit
echo 014D9060: E0 03 1F AA C0 03 5F D6 | xxd -r - sublime_merge
echo 014DAF68: 1F 20 03 D5             | xxd -r - sublime_merge
echo 014DAF7C: 1F 20 03 D5             | xxd -r - sublime_merge
echo 014D9DBC: C0 03 5F D6             | xxd -r - sublime_merge
echo 014D8D9C: C0 03 5F D6             | xxd -r - sublime_merge
echo 014D86E4: C0 03 5F D6             | xxd -r - sublime_merge
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Merge.app"

Requires Apple Command Line Tools to be installed


How to Crack Sublime Merge, Dev Channel, Build 2085

Thanks to @leogx9r for providing cracking methods.

https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3823090#gistcomment-3823090 https://gist.github.com/JerryLokjianming/71dac05f27f8c96ad1c8941b88030451?permalink_comment_id=3762883#gistcomment-3762883 https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3802197#gistcomment-3802197

Win64

Desciption Offset Original Patched
Initial License Check 0x00025300 55 41 57 41 56 41 55 41 48 C7 C0 19 01 00 00 C3
Persistent License Check 1 0x00028813 E8 B8 7F 27 00 90 90 90 90 90
Persistent License Check 2 0x0002882C E8 9F 7F 27 00 90 90 90 90 90
Disable Server Validation Thread 0x00026B20 55 56 57 48 83 EC 30 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x00024F25 55 C3
Disable Crash Reporter 0x00024070 41 C3
Bat Script
:: for Win64
cd /d "C:\Program Files\Sublime Merge" || exit
certutil -hashfile sublime_merge.exe md5 | find /i "8B6590708E6AAE98AC3AE29135DB084F" || exit
echo 00025300: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge.exe
echo 00028813: 90 90 90 90 90          | xxd -r - sublime_merge.exe
echo 0002882C: 90 90 90 90 90          | xxd -r - sublime_merge.exe
echo 00026B20: 48 31 C0 48 FF C0 C3    | xxd -r - sublime_merge.exe
echo 00024F25: C3                      | xxd -r - sublime_merge.exe
echo 00024070: C3                      | xxd -r - sublime_merge.exe

PS:xxd.exe extracted from git for windows

Linux

thinks @urxi here

Bash Script
# for Linux
cd /opt/sublime_merge || exit
md5sum -c <<<"958DA6B7EC687B25F55A16FF6A3D9BD0  sublime_merge" || exit
echo 0045F22C: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge
echo 004620F9: 90 90 90 90 90          | xxd -r - sublime_merge
echo 00462116: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0046086C: C3                      | xxd -r - sublime_merge
echo 0045EF26: C3                      | xxd -r - sublime_merge
echo 0045E986: C3                      | xxd -r - sublime_merge

macOS

Desciption Offset Original Patched
Initial License Check 0x0002C4CB 55 48 89 E5 41 57 41 56 48 C7 C0 19 01 00 00 C3
Persistent License Check 1 0x0002EB48 E8 15 23 19 00 90 90 90 90 90
Persistent License Check 2 0x0002EB67 E8 F6 22 19 00 90 90 90 90 90
Disable Server Validation Thread 0x0002D471 55 48 89 E5 41 57 41 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0002C156 55 C3
Disable Crash Reporter 0x0002B997 55 C3
Bash Script
# for MacOS
cd "/Applications/Sublime Merge.app/Contents/MacOS/" || exit
md5 -q sublime_merge | grep -i "D67510219FB14938A47BE39260C87215" || exit
echo 0002C4CB: 48 C7 C0 19 01 00 00 C3 | xxd -r - sublime_merge
echo 0002EB48: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0002EB67: 90 90 90 90 90          | xxd -r - sublime_merge
echo 0002D471: 48 31 C0 48 FF C0 C3    | xxd -r - sublime_merge
echo 0002C156: C3                      | xxd -r - sublime_merge
echo 0002B997: C3                      | xxd -r - sublime_merge
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Merge.app"

Requires Apple Command Line Tools to be installed

macOS (ARM64)

!!!! May have expired !!!!

Based on:

Desciption Offset Original Patched
Initial License Check 0x015027EC FC 6F BA A9 E6 03 1E AA E0 03 1F AA C0 03 5F D6
Persistent License Check 1 0x015046D4 78 C9 04 94 1F 20 03 D5
Persistent License Check 2 0x015046E8 73 C9 04 94 1F 20 03 D5
Disable Server Validation Thread 0x0150352C F6 57 BD A9 C0 03 5F D6
Disable License Notify Thread 0x01502528 FC 6F BD A9 C0 03 5F D6
Disable Crash Reporter 0x01501E70 FC 6F BC A9 C0 03 5F D6
Bash Script
# for macOS (ARM64)
cd "/Applications/Sublime Merge.app/Contents/MacOS/" || exit
md5 -q sublime_merge | grep -i "D67510219FB14938A47BE39260C87215" || exit
echo 015027EC: E0 03 1F AA C0 03 5F D6 | xxd -r - sublime_merge
echo 015046D4: 1F 20 03 D5             | xxd -r - sublime_merge
echo 015046E8: 1F 20 03 D5             | xxd -r - sublime_merge
echo 0150352C: C0 03 5F D6             | xxd -r - sublime_merge
echo 01502528: C0 03 5F D6             | xxd -r - sublime_merge
echo 01501E70: C0 03 5F D6             | xxd -r - sublime_merge
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Merge.app"

Requires Apple Command Line Tools to be installed

ST's new version of hexadecimal editing method

From: https://gist.github.com/opastorello/4d494d627ec9012367028c89cb7a1945

Search : 80 78 05 00 0f 94 c1 first result , replace: c6 40 05 01 48 85 c9

This patch is applicable to all x86-64 CPU platforms of ST.

ST's old version hexadecimal editing method

From: https://gist.github.com/opastorello/4d494d627ec9012367028c89cb7a1945?permalink_comment_id=4495369#gistcomment-4495369

97 94 0D --> 00 00 00

License Key:

----- BEGIN LICENSE -----
TwitterInc
200 User License
EA7E-890007
1D77F72E 390CDD93 4DCBA022 FAF60790
61AA12C0 A37081C5 D0316412 4584D136
94D7F7D4 95BC8C1C 527DA828 560BB037
D1EDDD8C AE7B379F 50C9D69D B35179EF
2FE898C4 8E4277A8 555CE714 E1FB0E43
D5D52613 C3D12E98 BC49967F 7652EED2
9D2D2E61 67610860 6D338B72 5CF95C69
E36B85CC 84991F19 7575D828 470A92AB
------ END LICENSE ------
@AxleUnix
Copy link

4146:
"license_notify": Patch(
Sig(
"55 56 57 48 81 EC ? ? ? ? 48 8D AC 24 ? ? ? ? 48 C7 85 ? ? ? ? ? ? ? ? 48 89 CF"
),

@maboloshi
Copy link
Author

4146: "license_notify": Patch( Sig( "55 56 57 48 81 EC ? ? ? ? 48 8D AC 24 ? ? ? ? 48 C7 85 ? ? ? ? ? ? ? ? 48 89 CF" ),

Thank you, 4146 has changed a lot

@monglung
Copy link

Update patch for win64 and linux64 to the latest ST 4146 and SM 2081: sublime_patch_2022_12_19.rar

Signature sha-256: 05e2d3f90efb6c70814acdbb120e3853035dcfa6ddd7502a7c8f709e7052ee5e

For those who like to do manual, here is the table for the new ST 4146:

Description : Offset | Original Value

*** Win64 ***
Initial License Check : 0xA7CEC | 55 41 57 41
Persistent License Check 1 : 0x71D0 | E8 23 7C 20 00
Persistent License Check 2 : 0x71E9 | E8 0A 7C 20 00
Disable Server Validation Thread : 0xA9AE2 | 55 56 57 48 83 EC 30
Disable License Notify Thread : 0xA78B9 | 55
Disable Crash Reporter : 0x400 | 41

*** Linux ***
Initial License Check : 0x413CCF | 55 41 57 41
Persistent License Check 1 : 0x407CD9 | E8 0E B4 12 00
Persistent License Check 2 : 0x407CF1 | E8 F6 B3 12 00
Disable Server Validation Thread : 0x41594C | 55 41 56 53 41 89 F6
Disable License Notify Thread : 0x432C88 | 41
Disable Crash Reporter : 0x3F9280 | 55

@maboloshi
Copy link
Author

@monglung Thank you for your offset information. 👍

@maboloshi
Copy link
Author

D:\APP\crack_st_sm>python crack_st_sm.py st4147
==========================================================================================
[*] Download: sublime_text_build_4147_x64.zip, from: https://download.sublimetext.com/sublime_text_build_4147_x64.zip ...
>>>: 23.1MB [00:05, 3.90MB/s]
[*] Extract: sublime_text.exe, from: sublime_text_build_4147_x64.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, Win64, Dev Channel, Build 4147
    MD5 Checksum -> DF04D9F76E97293A098D7E73DDB529B8

[>] Found RVA pattern for "isValidLicense for 4117" at 0x7B90 -> 0xA01AB -> 0xA7D40 ...
[*] Rewrite data '55 41 57 41' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction" at 0x71D0 ...
[*] Rewrite data 'E8 43 7D 20 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x71E9 ...
[*] Rewrite data 'E8 2A 7D 20 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0xA9BBE ...
[*] Rewrite data '55 56 57 48 83 EC 30' -> '48 31 C0 48 FF C0 C3' ...

[!] No pattern found for "licenseNotifyThread" ...

[>] Found pattern for "licenseNotifyThread for 4146" at 0xA790D ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x400 ...
[*] Rewrite data '41' -> 'C3' ...

==========================================================================================
[*] Download: sublime_text_build_4147_x64.tar.xz, from: https://download.sublimetext.com/sublime_text_build_4147_x64.tar.xz ...
>>>: 16.5MB [00:04, 3.47MB/s]
[*] Extract: sublime_text/sublime_text, from: sublime_text_build_4147_x64.tar.xz ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, Linux, Dev Channel, Build 4147
    MD5 Checksum -> 16187B1938EEF0AAD09972030709D69F

[>] Found RVA pattern for "isValidLicense" at 0x415489 -> 0xFFFFE841 -> 0x413CCF ...
[*] Rewrite data '55 41 57 41' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction for 4139" at 0x407CD9 ...
[*] Rewrite data 'E8 50 B4 12 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x407CF1 ...
[*] Rewrite data 'E8 38 B4 12 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x415952 ...
[*] Rewrite data '55 41 56 53 41 89 F6' -> '48 31 C0 48 FF C0 C3' ...

[!] No pattern found for "licenseNotifyThread" ...

[>] Found pattern for "licenseNotifyThread for 4146" at 0x41393E ...
[*] Rewrite data '41' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x3F9280 ...
[*] Rewrite data '55' -> 'C3' ...

==========================================================================================
[*] Download: sublime_text_build_4147_mac.zip, from: https://download.sublimetext.com/sublime_text_build_4147_mac.zip ...
>>>: 39.9MB [00:07, 5.39MB/s]
[*] Extract: Sublime Text.app/Contents/MacOS/sublime_text, from: sublime_text_build_4147_mac.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, macOS, Dev Channel, Build 4147
    MD5 Checksum -> B96A77CE7F8C51233E2A961E0C14EA06

[>] Found RVA pattern for "isValidLicense" at 0x9ECAE -> 0xFFFFF0D4 -> 0x9DD87 ...
[*] Rewrite data '55 48 89 E5' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction for 4139 " at 0x9A0F ...
[*] Rewrite data 'E8 6E 13 13 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x9A27 ...
[*] Rewrite data 'E8 56 13 13 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x9F2D1 ...
[*] Rewrite data '55 48 89 E5 41 57 41' -> '48 31 C0 48 FF C0 C3' ...

[>] Found pattern for "licenseNotifyThread" at 0x9D982 ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x2A57 ...
[*] Rewrite data '55' -> 'C3' ...

[!] No pattern found for "isValidLicense_arm64 for 4114" ...

[!] No pattern found for "invalidationFunction_arm64" ...

[!] No pattern found for "validationFunction_arm64 for 4139" ...

[>] Found pattern for "serverThread_arm64" at 0x105E35C ...
[*] Rewrite data 'F6 57 BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "licenseNotifyThread_arm64" at 0x105CD40 ...
[*] Rewrite data 'FC 6F BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "crashReporte_arm64" at 0xFE2788 ...
[*] Rewrite data 'FC 6F BC A9' -> 'C0 03 5F D6' ...

@maboloshi
Copy link
Author

@monglung Hey Buddy, your "Disable License Notify Thread" offset for Linux is different from mine.

\x41\x56\x53\x48\x81\xEC....\x48\x89\xFB\x48\x8D\x3D....\xE8....\x48\x8D\x15....

@maboloshi
Copy link
Author

D:\APP\crack_st_sm>python crack_st_sm.py st4146
==========================================================================================
[*] Download: sublime_text_build_4146_x64.zip, from: https://download.sublimetext.com/sublime_text_build_4146_x64.zip ...
[*] The sublime_text_build_4146_x64.zip already exists.
[*] Extract: sublime_text.exe, from: sublime_text_build_4146_x64.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, Win64, Dev Channel, Build 4146
    MD5 Checksum -> A352F37D67B747595E124CF3CD5928E3

[>] Found RVA pattern for "isValidLicense for 4117" at 0x7B90 -> 0xA0157 -> 0xA7CEC ...
[*] Rewrite data '55 41 57 41' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction" at 0x71D0 ...
[*] Rewrite data 'E8 23 7C 20 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x71E9 ...
[*] Rewrite data 'E8 0A 7C 20 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0xA9AE2 ...
[*] Rewrite data '55 56 57 48 83 EC 30' -> '48 31 C0 48 FF C0 C3' ...

[!] No pattern found for "licenseNotifyThread" ...

[>] Found pattern for "licenseNotifyThread for 4146" at 0xA78B9 ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x400 ...
[*] Rewrite data '41' -> 'C3' ...

==========================================================================================
[*] Download: sublime_text_build_4146_x64.tar.xz, from: https://download.sublimetext.com/sublime_text_build_4146_x64.tar.xz ...
[*] The sublime_text_build_4146_x64.tar.xz already exists.
[*] Extract: sublime_text/sublime_text, from: sublime_text_build_4146_x64.tar.xz ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, Linux, Dev Channel, Build 4146
    MD5 Checksum -> 4A36EDA80930AA381A75BC1A1F478607

[>] Found RVA pattern for "isValidLicense" at 0x415483 -> 0xFFFFE847 -> 0x413CCF ...
[*] Rewrite data '55 41 57 41' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction for 4139" at 0x407CD9 ...
[*] Rewrite data 'E8 0E B4 12 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x407CF1 ...
[*] Rewrite data 'E8 F6 B3 12 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x41594C ...
[*] Rewrite data '55 41 56 53 41 89 F6' -> '48 31 C0 48 FF C0 C3' ...

[!] No pattern found for "licenseNotifyThread" ...

[>] Found pattern for "licenseNotifyThread for 4146" at 0x41393E ...
[*] Rewrite data '41' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x3F9280 ...
[*] Rewrite data '55' -> 'C3' ...

==========================================================================================
[*] Download: sublime_text_build_4146_mac.zip, from: https://download.sublimetext.com/sublime_text_build_4146_mac.zip ...
[*] The sublime_text_build_4146_mac.zip already exists.
[*] Extract: Sublime Text.app/Contents/MacOS/sublime_text, from: sublime_text_build_4146_mac.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Text, macOS, Dev Channel, Build 4146
    MD5 Checksum -> B7D1FBC9765259E31740ADFBC1206AE3

[>] Found RVA pattern for "isValidLicense" at 0x9EC0A -> 0xFFFFF0D8 -> 0x9DCE7 ...
[*] Rewrite data '55 48 89 E5' -> '48 31 C0 C3' ...

[>] Found pattern for "invalidationFunction for 4139 " at 0x99DF ...
[*] Rewrite data 'E8 AE 12 13 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction for 4139" at 0x99F7 ...
[*] Rewrite data 'E8 96 12 13 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x9F22D ...
[*] Rewrite data '55 48 89 E5 41 57 41' -> '48 31 C0 48 FF C0 C3' ...

[>] Found pattern for "licenseNotifyThread" at 0x9D8E2 ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x2A27 ...
[*] Rewrite data '55' -> 'C3' ...

[!] No pattern found for "isValidLicense_arm64 for 4114" ...

[!] No pattern found for "invalidationFunction_arm64" ...

[!] No pattern found for "validationFunction_arm64 for 4139" ...

[>] Found pattern for "serverThread_arm64" at 0x10622E8 ...
[*] Rewrite data 'F6 57 BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "licenseNotifyThread_arm64" at 0x1060CD8 ...
[*] Rewrite data 'FC 6F BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "crashReporte_arm64" at 0xFE6764 ...
[*] Rewrite data 'FC 6F BC A9' -> 'C0 03 5F D6' ...

@monglung
Copy link

@maboloshi Yours is correct...

So, here is the new updated patch for win64 and linux64 to the latest ST 4147 and SM 2081: sublime_patch_2022_12_22.rar

Signature sha-256: 01e51261a3bdcd91074e9f640855e0edae0ff2a51ec69808c85e08018d57e2cc

@bms8197
Copy link

bms8197 commented Dec 29, 2022

Did anyone manage to patch ST 4147 for MacOS ARM?

@Destitute-Streetdwelling-Guttersnipe
Copy link

Copy link

ghost commented Jan 30, 2023

Hi, I wrote a patcher for linux, and you guys can use the code and just change the patterns. thanks to everyone for writing the offsets and hex patterns, https://github.com/socialfright/subzero, Thanks, I will make one for all OS's but I just wanted to send a proof of concept.

@bohdantverdyi
Copy link

Thanks, it works on Mac m1. But i have entered some license key to activate.

@luckykong
Copy link

Thanks, it works on Mac m1. But i have entered some license key to activate.

could you please share your offset information? I have tried crack sublime text 4147,but failed...

@bohdantverdyi
Copy link

Thanks, it works on Mac m1. But i have entered some license key to activate.

could you please share your offset information? I have tried crack sublime text 4147,but failed...

Don't know how to check it.

I made clean install of sublime, then followed steps from script. At the end put some license key to activate it.

Copy link

ghost commented Feb 1, 2023

@maboloshi How did you find these offsets?, which tools did you use on linux.

@maboloshi
Copy link
Author

maboloshi commented Feb 1, 2023

@maboloshi How did you find these offsets?, which tools did you use on linux.

All crack methods here are implemented by @leogx9r. Currently, many rules are starting to fail.

Copy link

ghost commented Feb 1, 2023

Updated my patcher script for Windows, it might not work but it seems to find all the offsets.

[-] sublime patch for 4143 linux and windows x64, python port
[>] Linux ELF: Detected -> 9055008
Continue? Y/Ny
[+] Found unpatched value for 'isValidLicense'at 0x3a31f2
[+] Writing patch --- b'UAWA' --> b'H1\xc0\xc3'
[+] Found unpatched value for 'invalidationFunction'at 0x399387
[+] Writing patch --- b'\xe8\x08\x0e\x12\x00' --> b'\x90\x90\x90\x90\x90'
[+] Found unpatched value for 'validationFunction' at 0x39939d
[+] Writing patch --- b'\xe8\xf2\r\x12\x00' --> b'\x90\x90\x90\x90\x90'
[+] Found unpatched value for 'serverThread' at 0x3a4e30
[+] Writing patch --- b'UAVSA\x89\xf6' --> b'H1\xc0H\xff\xc0\xc3'
[+] Found unpatched value for 'licenseNotifyThread' at 0x3a2e82
[+] Writing patch --- b'A' --> b'\xc3'
[+] Found unpatched value for 'crashReporter' at 0x38c9f0
[+] Writing patch --- b'U' --> b'\xc3'
[=] Saving file to /home/kennedy/Downloads/sublime_text/sublime_text
[+] DONE =]

@luckykong
Copy link

Thanks, it works on Mac m1. But i have entered some license key to activate.

could you please share your offset information? I have tried crack sublime text 4147,but failed...

Don't know how to check it.

I made clean install of sublime, then followed steps from script. At the end put some license key to activate it.

which script? Do you mean the script of @maboloshi for 4146?
Is it works for 4147? I will have a try.

@leagueofperez
Copy link

hi @leogx9r @maboloshi first of all thanks for posting this.
Sublime Merge build 2083 is out, can you add cracking method for this build?

@maboloshi
Copy link
Author

Except for Win64, the rest are invalid

D:\APP\crack_st_sm>python crack_st_sm.py sm2083
==========================================================================================
[*] Download: sublime_merge_build_2083_x64.zip, from: https://download.sublimetext.com/sublime_merge_build_2083_x64.zip ...
[*] The sublime_merge_build_2083_x64.zip already exists.
[*] Extract: sublime_merge.exe, from: sublime_merge_build_2083_x64.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Merge, Win64, Stable Channel, Build 2083
    MD5 Checksum -> E33B76ADA6E7E7577CD4E81A7A4580C7

[>] Found RVA pattern for "isValidLicense" at 0x28B77 -> 0xFFFFC62C -> 0x251A8 ...
[*] Rewrite data '55 41 57 41 56 41 55 41' -> '48 C7 C0 19 01 00 00 C3' ...

[!] No pattern found for "isValidLicense2" ...

[!] No pattern found for "isValidLicense_st" ...

[>] Found pattern for "invalidationFunction" at 0x286A3 ...
[*] Rewrite data 'E8 70 AA 26 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction" at 0x286BC ...
[*] Rewrite data 'E8 57 AA 26 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x269B8 ...
[*] Rewrite data '55 56 57 48 83 EC 30' -> '48 31 C0 48 FF C0 C3' ...

[>] Found pattern for "licenseNotifyThread" at 0x7174A ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x23F18 ...
[*] Rewrite data '41' -> 'C3' ...

==========================================================================================
[*] Download: sublime_merge_build_2083_x64.tar.xz, from: https://download.sublimetext.com/sublime_merge_build_2083_x64.tar.xz ...
>>>: 5.15MB [00:04, 1.18MB/s]
[*] Extract: sublime_merge/sublime_merge, from: sublime_merge_build_2083_x64.tar.xz ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Merge, Linux, Stable Channel, Build 2083
    MD5 Checksum -> 86F61A82E7EE8DD9BDC4CF16A7C8E825

[!] No pattern found for "isValidLicense" ...

[!] No pattern found for "isValidLicense2" ...

[!] No pattern found for "isValidLicense_st" ...

[>] Found pattern for "invalidationFunction" at 0x45D21D ...
[*] Rewrite data 'E8 1C 9E 16 00' -> '90 90 90 90 90' ...

[!] No pattern found for "invalidationFunction for 2078" ...

[!] No pattern found for "validationFunction" ...

[>] Found pattern for "serverThread" at 0x45B990 ...
[*] Rewrite data '55 41 56 53 41 89 F6' -> '48 31 C0 48 FF C0 C3' ...

[!] No pattern found for "licenseNotifyThread" ...

[>] Found pattern for "crashReporter" at 0x459ABA ...
[*] Rewrite data '55' -> 'C3' ...

==========================================================================================
[*] Download: sublime_merge_build_2083_mac.zip, from: https://download.sublimetext.com/sublime_merge_build_2083_mac.zip ...
>>>: 35.9MB [00:08, 4.27MB/s]
[*] Extract: Sublime Merge.app/Contents/MacOS/sublime_merge, from: sublime_merge_build_2083_mac.zip ...

[>] Attempting to autodetect input file ...
[*] Input file -> Sublime Merge, macOS, Stable Channel, Build 2083
    MD5 Checksum -> B1AADED4F196EEEEBF8D5A6F98B11288

[>] Found RVA pattern for "isValidLicense" at 0x2FB04 -> 0xFFFFC7D6 -> 0x2C2DF ...
[*] Rewrite data '55 48 89 E5 41 57 41 56' -> '48 C7 C0 19 01 00 00 C3' ...

[!] No pattern found for "isValidLicense2" ...

[!] No pattern found for "isValidLicense_st" ...

[>] Found pattern for "invalidationFunction" at 0x2E96C ...
[*] Rewrite data 'E8 1F B9 18 00' -> '90 90 90 90 90' ...

[>] Found pattern for "validationFunction" at 0x2E98B ...
[*] Rewrite data 'E8 00 B9 18 00' -> '90 90 90 90 90' ...

[>] Found pattern for "serverThread" at 0x2D295 ...
[*] Rewrite data '55 48 89 E5 41 57 41' -> '48 31 C0 48 FF C0 C3' ...

[>] Found pattern for "licenseNotifyThread" at 0x2BF6A ...
[*] Rewrite data '55' -> 'C3' ...

[>] Found pattern for "crashReporter" at 0x2B7AB ...
[*] Rewrite data '55' -> 'C3' ...

[!] No pattern found for "isValidLicense_arm64 for 2062" ...

[!] No pattern found for "isValidLicense_arm64 for 2075" ...

[>] Found pattern for "invalidationFunction_arm64 for 2065" at 0x14DAF68 ...
[*] Rewrite data 'AB B6 04 94' -> '1F 20 03 D5' ...

[!] No pattern found for "validationFunction_arm64 for 2065" ...

[>] Found pattern for "validationFunction_arm64 for 2078" at 0x14DAF7C ...
[*] Rewrite data 'A6 B6 04 94' -> '1F 20 03 D5' ...

[>] Found pattern for "serverThread_arm64" at 0x14D9DBC ...
[*] Rewrite data 'F6 57 BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "licenseNotifyThread_arm64" at 0x14D8D9C ...
[*] Rewrite data 'FC 6F BD A9' -> 'C0 03 5F D6' ...

[>] Found pattern for "crashReporter_arm64" at 0x14D86E4 ...
[*] Rewrite data 'FC 6F BC A9' -> 'C0 03 5F D6' ...

@STSMHQ
Copy link

STSMHQ commented Feb 19, 2023

@n6333373 Thanks a lot!

@coaperator
Copy link

@n6333373
Copy link

n6333373 commented Feb 19, 2023

Pre-patched Tarballs

Sublime Merge 2083 Stable

and there are offsets like here https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47#bash-script-6 ?

Unfortunately no. My patcher just did some simple string (or bytes, whatever) replacements. Someone may compare binaries to find out what have been modified though.

@brian6932
Copy link

@gildas-ld
Copy link

Pre-patched Tarballs

Sublime Merge 2083 Stable

and there are offsets like here https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47#bash-script-6 ?

Unfortunately no. My patcher just did some simple string (or bytes, whatever) replacements. Someone may compare binaries to find out what have been modified though.

Here :

#!/usr/bin/env sh
md5sum -c <<<"86F61A82E7EE8DD9BDC4CF16A7C8E825 sublime_merge" || exit

echo 000EFF60: 2F00 0000 0000 0000 0000 0000 0000 0000  | xxd -r - sublime_merge
echo 000EFF70: 0000 0000 0000 4541 3745 0050 7572 6368  | xxd -r - sublime_merge
echo 000FB2E0: 6500 2D00 7477 0072 2B62 0054 6875 0000  | xxd -r - sublime_merge
echo 000FB2F0: 0000 0000 0000 0000 0000 0000 0000 206D  | xxd -r - sublime_merge
echo 00102DB0: 0000 0000 0000 0000 0000 0000 0000 0000  | xxd -r - sublime_merge
echo 00102DC0: 0000 0000 0000 7072 6576 696F 7573 5F63  | xxd -r - sublime_merge
echo 001075A0: 6E64 6F77 003D 3D3D 206E 3633 3333 3337  | xxd -r - sublime_merge
echo 001075B0: 3320 3D3D 3D00 0000 0000 002E 6D69 7373  | xxd -r - sublime_merge
echo 0045A360: B819 0100 00C3 5541 5453 4881 EC88 2400  | xxd -r - sublime_merge
echo 0045D210: 0048 8D3D D00F 0000 BA88 1300 0090 9090  | xxd -r - sublime_merge
echo 0045D220: 9090 4889 5C24 0848 8BB3 1003 0000 488D  | xxd -r - sublime_merge
echo 0045D230: 3D10 1200 00BA 983A 0000 9090 9090 9048  | xxd -r - sublime_merge
echo 0047AF90: 3A00 0090 9090 9090 4C89 E748 89DE E8AB  | xxd -r - sublime_merge

@leagueofperez
Copy link

Pre-patched Tarballs

Sublime Merge 2083 Stable

and there are offsets like here https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47#bash-script-6 ?

Unfortunately no. My patcher just did some simple string (or bytes, whatever) replacements. Someone may compare binaries to find out what have been modified though.

Here :

#!/usr/bin/env sh
md5sum -c <<<"86F61A82E7EE8DD9BDC4CF16A7C8E825 sublime_merge" || exit

echo 000EFF60: 2F00 0000 0000 0000 0000 0000 0000 0000  | xxd -r - sublime_merge
echo 000EFF70: 0000 0000 0000 4541 3745 0050 7572 6368  | xxd -r - sublime_merge
echo 000FB2E0: 6500 2D00 7477 0072 2B62 0054 6875 0000  | xxd -r - sublime_merge
echo 000FB2F0: 0000 0000 0000 0000 0000 0000 0000 206D  | xxd -r - sublime_merge
echo 00102DB0: 0000 0000 0000 0000 0000 0000 0000 0000  | xxd -r - sublime_merge
echo 00102DC0: 0000 0000 0000 7072 6576 696F 7573 5F63  | xxd -r - sublime_merge
echo 001075A0: 6E64 6F77 003D 3D3D 206E 3633 3333 3337  | xxd -r - sublime_merge
echo 001075B0: 3320 3D3D 3D00 0000 0000 002E 6D69 7373  | xxd -r - sublime_merge
echo 0045A360: B819 0100 00C3 5541 5453 4881 EC88 2400  | xxd -r - sublime_merge
echo 0045D210: 0048 8D3D D00F 0000 BA88 1300 0090 9090  | xxd -r - sublime_merge
echo 0045D220: 9090 4889 5C24 0848 8BB3 1003 0000 488D  | xxd -r - sublime_merge
echo 0045D230: 3D10 1200 00BA 983A 0000 9090 9090 9048  | xxd -r - sublime_merge
echo 0047AF90: 3A00 0090 9090 9090 4C89 E748 89DE E8AB  | xxd -r - sublime_merge

Thank you very much!

@maboloshi
Copy link
Author

How to Crack Sublime Text, Dev Channel, Build 4148

Thanks to @leogx9r for providing cracking methods.

https://gist.github.com/JerryLokjianming/71dac05f27f8c96ad1c8941b88030451?permalink_comment_id=3762200#gistcomment-3762200
https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3802197#gistcomment-3802197
https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3803204#gistcomment-3803204

Win64

Desciption Offset Original Patched
Initial License Check 0x000A8438 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x000071D0 E8 E3 86 20 00 90 90 90 90 90
Persistent License Check 2 0x000071E9 E8 CA 86 20 00 90 90 90 90 90
Disable Server Validation Thread 0x000AA228 55 56 57 48 83 EC 30 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x000A8005 55 C3
Disable Crash Reporter 0x00000400 41 C3

for 4117, 4118: https://gist.github.com/maboloshi/feaa63c35f4c2baab24c9aaf9b3f4e47?permalink_comment_id=3927712#gistcomment-3927712

Bat Script
:: for Win64
cd /d "C:\Program Files\Sublime Text" || exit
certutil -hashfile sublime_text.exe md5 | find /i "E7E1484E9981268FD1E468531BFA9E88" || exit
echo 000A8438: 48 31 C0 C3          | xxd -r - sublime_text.exe
echo 000071D0: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 000071E9: 90 90 90 90 90       | xxd -r - sublime_text.exe
echo 000AA228: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text.exe
echo 000A8005: C3                   | xxd -r - sublime_text.exe
echo 00000400: C3                   | xxd -r - sublime_text.exe

PS:xxd.exe extracted from git for windows

The license can be any string.

Blocked by Microsoft Defender SmartScreen -> More Info -> Run Anyway

Screenshot
![Screenshot](https://i.imgur.com/t4QlRZ6.png)

![Screenshot](https://i.imgur.com/18372Rh.png)

Linux

Desciption Offset Original Patched
Initial License Check 0x00414DA9 55 41 57 41 48 31 C0 C3
Persistent License Check 1 0x00408DD3 E8 BA B8 12 00 90 90 90 90 90
Persistent License Check 2 0x00408DEB E8 A2 B8 12 00 90 90 90 90 90
Disable Server Validation Thread 0x00416ACC 55 41 56 53 41 89 F6 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x00414A18 41 C3
Disable Crash Reporter 0x003FA0B0 55 C3
Bash Script
# for Linux
cd /opt/sublime_text || exit
md5sum -c <<<"B5FAFC0BCCFCBDA235293B5A79AA4C62  sublime_text" || exit
echo 00414DA9: 48 31 C0 C3          | xxd -r - sublime_text
echo 00408DD3: 90 90 90 90 90       | xxd -r - sublime_text
echo 00408DEB: 90 90 90 90 90       | xxd -r - sublime_text
echo 00416ACC: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 00414A18: C3                   | xxd -r - sublime_text
echo 003FA0B0: C3                   | xxd -r - sublime_text

macOS

Desciption Offset Original Patched
Initial License Check 0x0009EEBB 55 48 89 E5 48 31 C0 C3
Persistent License Check 1 0x0000A4BF E8 40 15 13 00 90 90 90 90 90
Persistent License Check 2 0x0000A4D7 E8 28 15 13 00 90 90 90 90 90
Disable Server Validation Thread 0x000A0411 55 48 89 E5 41 57 41 48 31 C0 48 FF C0 C3
Disable License Notify Thread 0x0009EAB6 55 C3
Disable Crash Reporter 0x00003257 55 C3
Bash Script
# for MacOS
cd "/Applications/Sublime Text.app/Contents/MacOS/" || exit
md5 -q sublime_text | grep -i "265090B4E919F9EDC4A826B477C03E5D" || exit
echo 0009EEBB: 48 31 C0 C3          | xxd -r - sublime_text
echo 0000A4BF: 90 90 90 90 90       | xxd -r - sublime_text
echo 0000A4D7: 90 90 90 90 90       | xxd -r - sublime_text
echo 000A0411: 48 31 C0 48 FF C0 C3 | xxd -r - sublime_text
echo 0009EAB6: C3                   | xxd -r - sublime_text
echo 00003257: C3                   | xxd -r - sublime_text
Re-Sign App
codesign --force --deep --sign - "/Applications/Sublime Text.app"

Requires Apple Command Line Tools to be installed

@bms8197
Copy link

bms8197 commented Mar 15, 2023

I assume the above patch is for MacOS running on Intel CPUs and not on ARM. Is there any patch for Apple Sillicon?

@maboloshi
Copy link
Author

I assume the above patch is for MacOS running on Intel CPUs and not on ARM. Is there any patch for Apple Sillicon?

Currently, there are no patches available for Apple Sillicon.😢

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment