Archive for the ‘reverse engineering’ Category

YAY Finally cracked the 10 item limit on LOADing

May 4, 2008

I won’t give out the method because it took me about 2 years (slow learner and barking on wrong tree)

Tip: 1) replace 2 ENGLISH WORDS with winhex with spaces

2) not need ollydbg/IDA at all

If you understand ole/ado script commands it should not be hard to figure out.

—-

With ollydbg…

1, 2) Then you have 2 Unknown license to patch

3) And finally the 10 limit ADD error to patch

There are other template patches also but only if you use them. will post that if I find those addresses.

 

Too bad the t-mag site is over moderated… otherwise can post there

http://www.t-nation.com/tmagnum/readTopic.do?id=892090

http://www.t-nation.com/tmagnum/readTopic.do?id=479444

Reverse engineer the weight training program (company closeed down)

January 14, 2008

Use http://leechermods.blogspot.com/2007/12/exeinfo-pe-0018c-christmas-edition-by.html

try dilloDIE 1.6 www.cip-re.6x.to (not this one)

http://www.woodmann.com/collaborative/tools/index.php/Quick_Unpack (hmm crashes… 2.1)

ArmaGeddon_by_Condzero green one (ok, working has “_” in filename)

use DLL from dillodie 1.6

vbastrcmp one

——-

vbaonerror = runs error reporter… ??? not run even when called (just retn I think)

UNICODE “Unknown License detected

00699F62 – runs

checks string in 1526FC (from 12f69c-114 = 12f588 … contains reverse endian FC2615)

returns FFFFFFFF if not match

DO A PUSH PATCH with SELF CREATED CODE CAVE

—- LOGO shows with “Blank edition”, then next one comes up (3ent.exe)

00571EED

checks 152724 (based on 7660dc)

pushes 4555fc (4 00′s)

—–

571eb6 jnz to jmp (2nd Unk lic)

nop 572185 – “enterprise” unknown.. stuff

——-

(at least 14 calls to … 676885 :( )- The demo limit for this log has been reached

From 5772e3 (just do a RETN at the 676800)

Ollydbg (msvbm60 cracking)

ECX = 000 OK, FFF Error

The demo edition cannot be updated (43db0b – 56fcf0)

Demo 457220

75e103 not taken – expired

75e17f – accepted

75e4ca – Register key

69935d – user key

457248 -Enterprise

46d1b8 – type


Follow

Get every new post delivered to your Inbox.