- Joined
- Jan 25, 2007
- Messages
- 43
- Reaction score
- 0
The Target:
The Tools:
OllyDbg 1.09d, PEiD 0.92, W32dasm, HexWorkshop 4.1
The Protection:
Serial Protection
Other Information:
This is a tutorial to introduce the new crackers to serial fishing with Olly. I will take you through the steps that I took in cracking this program. This may help you get a better idea of how to approach new targets.
Let us first get set up and ready to crack. I like to open the folder with my target in it. In this case c:\program files\worldtv\ and make a quick backup that we can work on without fear of screwing up the file. I named mine worldtv2.exe and I will refer to it as such through the tutorial.
It has become habit to first examine a target with PEiD to determine the packer or protector. Open up PEiD and drag worldtv2.exe into it. The result: "Microsoft Visual C++ 5.0". Surprisingly, the target is not packed or protected. That will make it all the easier to crack.
The Tools:
OllyDbg 1.09d, PEiD 0.92, W32dasm, HexWorkshop 4.1
The Protection:
Serial Protection
Other Information:
This is a tutorial to introduce the new crackers to serial fishing with Olly. I will take you through the steps that I took in cracking this program. This may help you get a better idea of how to approach new targets.
Intro:
All the tools you will need can be found online:
To view the content, you need to sign in or register
To view the content, you need to sign in or register
To view the content, you need to sign in or register
Let us first get set up and ready to crack. I like to open the folder with my target in it. In this case c:\program files\worldtv\ and make a quick backup that we can work on without fear of screwing up the file. I named mine worldtv2.exe and I will refer to it as such through the tutorial.
It has become habit to first examine a target with PEiD to determine the packer or protector. Open up PEiD and drag worldtv2.exe into it. The result: "Microsoft Visual C++ 5.0". Surprisingly, the target is not packed or protected. That will make it all the easier to crack.
Body:
Finding the Bytes:
First we are going to try the easy way. We are going to patch the jump that returns the invalid registration box. Run w32dasm and use it to open up WorldTV.exe. We are opening the original WorldTV.exe file so we can work on the copy that we made. After the file has been disassembled, we will look for the string from the messagebox. To do this click on the String References button at the top of w32dasm. A new window opens up with a list of all strings found in the file. Scroll down until you find "Invalid Registration Code" and double click it. You should now be at the following lines:
Looking at the code we see a test eax,eax followed by a jne 0041B54C
We want to change the jne (jump if not equal) to jmp (jump) that way the program will register when you use any serial. To do this we will need to find where the jne instruction is located in WorldTv.exe. That information is found at the bottom of the w32dasm window. You should see: Line:52558 Pg 657 and 658 of 1734 Code Data @:0041B521 @Offset 0001A915h in File WorldTV.exe
We are interested in the Offset value of 0001A915h. Write this number down; ignore the h at the end it just means that the value is hexadecimal.
First we are going to try the easy way. We are going to patch the jump that returns the invalid registration box. Run w32dasm and use it to open up WorldTV.exe. We are opening the original WorldTV.exe file so we can work on the copy that we made. After the file has been disassembled, we will look for the string from the messagebox. To do this click on the String References button at the top of w32dasm. A new window opens up with a list of all strings found in the file. Scroll down until you find "Invalid Registration Code" and double click it. You should now be at the following lines:
Looking at the code we see a test eax,eax followed by a jne 0041B54C
We want to change the jne (jump if not equal) to jmp (jump) that way the program will register when you use any serial. To do this we will need to find where the jne instruction is located in WorldTv.exe. That information is found at the bottom of the w32dasm window. You should see: Line:52558 Pg 657 and 658 of 1734 Code Data @:0041B521 @Offset 0001A915h in File WorldTV.exe
We are interested in the Offset value of 0001A915h. Write this number down; ignore the h at the end it just means that the value is hexadecimal.
)))) no comment Euro News
