Scribd
Upload
284 views

Crack Tutorial by BankwinG

This document provides a basic tutorial on cracking the registration code for FastStone Capture 6.3. It lists the necessary tools including Ollydbg, a hex editor, PE identifier and unpacking tool. It describes using these tools to identify that the software is packed with UPX, unpack it using UPX, and then use Ollydbg to find references to "Invalid User Name or Registration Code" in the code. It explains setting breakpoints and stepping through the code to find the checks for the registration and then provides instructions to modify the JE and JNE jumps in the hex code to bypass the registration check.

Uploaded by

Bank WinG
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
284 views

Crack Tutorial by BankwinG

This document provides a basic tutorial on cracking the registration code for FastStone Capture 6.3. It lists the necessary tools including Ollydbg, a hex editor, PE identifier and unpacking tool. It describes using these tools to identify that the software is packed with UPX, unpack it using UPX, and then use Ollydbg to find references to "Invalid User Name or Registration Code" in the code. It explains setting breakpoints and stepping through the code to find the checks for the registration and then provides instructions to modify the JE and JNE jumps in the hex code to bypass the registration check.

Uploaded by

Bank WinG
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 17

Basic Cracking Tutorial

By BankwinG
(23/3/09)
Target:
• FastStone Capture 6.3
Need:
• Ollydbg
• Hex editor  xvi32
• PE identifier
• Unpacker Tool 
 ก
 ก ก pack   ! UPX
• Brain

"ก#$  
 % "
!! $&'$('  ก Enter Registration Code

( ')$)* ก+$&'' 


 Invalid User Name or Registration Code "ก

&!)  ก ก Pack $%    PEiD !$,ก#$  ' ก Pack  UPX
$-ก Unpack .(/ก  ก UPX (http://upx.sourceforge.net/download/upx303d.zip)
 0-)' #upx –d targetFilename.exe

$(ก Ollydbg !ก


 0(12ก  > Search for > All referenced text setting

!'$&' Text strings  


 !ก
 0(12ก  )3 (% ก Search for text )0-
Invalid User Name or Registration Code!  !กก)$)*('
& 4

Double 0(12ก

!-)  Code 


5 '6)& 'ก!$ก1' 76) ก $) '41
(%  
7% &!)   Code )$ ก ')
)'ก&!ก 0% '$ “>” $)'ก jump  '
code )
(%  cursor !
$,  0(' ก Jumps from xxxx,xxxx
$ 0ก Jumps 
!ก) '&-$'

0(12ก  Jumps from (% ก Go to …. 7%  '&-$' Jump 


% (% ก Go to ..  
& ก $( !-$ &-$'&!) $) !$,ก $ Code 
') '
0-)' JE 0% Jump if Equal !ก '&-$'ก-$% 0!กก TEST ก

-ก Set break point &-$'


') '  ก F2
!กก10$/4 ') '&-$'
!)' ') ก$)417(
78
!& 'ก Code !ก JE 6 JNE 7% !-$()$)41ก jump ) ก
$)41 -ก) )&19 ก(%  Cursor  '& 'กก ก space bar (ก!ก JE -> JNE
ก Assemble 1 (ก " -$% ก code ก

0(12ก กก (% ก View -> Executable file !0 offset  !ก 0% 1FA12E
-5
-ก3กก
ก F9 7% run ก

) )$)* ก Register !ก


 ก!$ 3&-$'- break point  ก F9 % *
! 
 0(' )-,!(

&:ก 

$('!ก
& '&!) $ About  'ก7%  ก('  '),!) ;/$% 
"$ About 
!$, ' ก6 Unregistered Trial Version )'กCrack ' '!

0(12ก Code > Search for > All referenced text setting ($0- About
1( 0(12ก

% 1(0(12ก(!-$ Code 


5 '6) ' กก-$0&'* '$&' About
(TAboutWindow)
(% ('7%  ก&!) !7 Code )
 ก   license  '6<$ !กก(4( ') '
(-$01  )
ก,0% )& 'ก$ก execute 
 '

$('!ก(&-$'& 'ก$ก Execute &'$ ก,$-ก(% 


7% &!)  code
$!-$ code & 'ก ก execute 7 (% 
ก,!! code 4 ก jump  '&-$' 
$('!ก&-$' ' code & 'ก$ execute )'ก&!ก0-)' JE $% JNE (&-$'! jump )  '
 5 '6&-$'$('!ก code  ก license  ก& '
% &-$'(ก,$ Set break point  กก F2 $('!ก
$ '$ About ก0
' ก!$ 3
&' set break point  $)'ก&('  Jump is NOT taken )' 
ก jump
ก1
ก
 ก,& 'ก ก F9 7% run ก& 

ก!$ 3&  )'ก&(' Jump is taken )'&-$'


ก1ก Jump 7%  ') ก
ก6 Unregistered Trial version
%  ''
(ก,$( '( 0!ก  '1 JNE 6 JE  ก space bar (( 0 ก Assemble 1 ("

0(12ก กก (% ก View -> Executable file !0 offset  !ก 0% 1FAB07 !ก
ก F9 7% 
ก& 
ก!$ 3&'&-$' )'ก&(' Jump is taken )'ก Jump 
ก,$-กก$% 

& 4 (!-0 offset  ก F9 ก& 

&-$')3 ก,ก
!ก
(% (' Code )& 'ก$ก execute )
!-6& 'กก, 7 ''ก,& '5ก case
$ '

&
4& 'ก$6 License  Education worldwide
( ( 'ก71 ก$ '&-$'
% ก),!(ก,ก F9 7% ก&  !$, $&' About  ก License  ก& '(6
Education Worldwide  

% &-$' Offset !ก


'$( ก,$$(ก ก Hex editor 7% ก.(/
ก Ctrl + G ) offset ! 

JE <-> JNE
74 <-> 75
Or
0F 84 <->
0F 85

ก!7 '&-$'& 'ก !ก


ก,-กก0(9 16 5 '60-)' JE !ก&''% !( 0-)'
!ก JE 6 JNE $( 0!ก 74 6 75 $% 0F 84 6 0F 85 0
 '0-)' JE 6 0F 84 8
ก0$6
0F 85 ก03ก*&-$' offset !!$ ),!(ก save
) ก$('!กก0 ก Hex editor ),!( ก About !$,ก#$  '& 

 License  Education Worldwide && 'ก 

% Crack ),!(ก,-ก pack .(/ก(7% $ (,ก(' 0-)' upx ก unpack & ก
 '
 ก0-)' #upx TargetFilename.exe

End…

You might also like