CiN1 Team - Cracking Is Number 1  

Cracking Is Number 1

Go Back   CiN1 Team - Cracking Is Number 1 >
~~ Learning Cracking ~~
> Free Talk About Cracking

Nội qui diễn đn - Forum Rules Must Read

Search kỹ trước khi post bi


Reply
 
Thread Tools Display Modes
Old 22-08-2016, 03:11 AM   #1
User Profile
vlkc_user

 
vlkc_user's Avatar
 
Join Date: Fri Jun 2016
Posts: 5

Cấp bậc: 1 [cin1teamcin1teamcin1teamcin1teamcin1teamcin1team]
Sức sống: 0 / 8
Hoạt động: 1 / 21
Kinh nghiệm: 34%


Thanks: 2
Thanked 0 Times in 0 Posts
Default Need some advice to analyze dll

Hello, from site warelogic dot com I've downloaded tool which is not packed and not protected with any protector. I can not find how with ollydbg take out 60 days limit.

I also sow that in registry - setup always creates new key. And I think for another 60 days
Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Warelogic\SimpleLPR2]
"License"=hex:58,13,cf,0a,72,cd,e4,40,6e,2f,6a,30,e0,cf,24,8e,4e,d4,87,9a,44,\
  62,d6,23,70,17,09,d9
If I delete it and install again then software works again. Maybe I have to decompile installer?


Anyway - please advice where to go

Thank you.
  Reply With Quote
Old 22-08-2016, 02:14 PM   #2
User Profile
portbinder

 
portbinder's Avatar
 
Join Date: Sat Feb 2014
Posts: 130

Cấp bậc: 10 [cin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1team]
Sức sống: 0 / 236
Hoạt động: 43 / 2185
Kinh nghiệm: 44%


Thanks: 265
Thanked 104 Times in 46 Posts
Default

bro open the application with ollydbg and it should load the that dll. Analyze it and find the functions that are imported from that dll by application. that's it..













Chữ k c nhn của portbinder

Beyond Infinity is Impossible, Beyond Impossible is Raz0r

  Reply With Quote
Old 22-08-2016, 03:50 PM   #3
User Profile
vlkc_user

 
vlkc_user's Avatar
 
Join Date: Fri Jun 2016
Posts: 5

Cấp bậc: 1 [cin1teamcin1teamcin1teamcin1teamcin1teamcin1team]
Sức sống: 0 / 8
Hoạt động: 1 / 21
Kinh nghiệm: 34%


Thanks: 2
Thanked 0 Times in 0 Posts
Default

I have tried, but no luck. Can you help me?
  Reply With Quote
Old 23-08-2016, 10:16 AM   #4
User Profile
arturo1000

 
arturo1000's Avatar
 
Join Date: Fri Aug 2010
Location: Mxico
Posts: 59

Cấp bậc: 6 [cin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1team]
Sức sống: 0 / 138
Hoạt động: 19 / 2716
Kinh nghiệm: 55%

Tiểu sử: Think, research, do the theory
Địa chỉ: Mxico
Sở thch: A lot, one one of them, reverse engineering
Nghề nghiệp: Researcher

Thanks: 71
Thanked 367 Times in 55 Posts
Default

This is a net program, in that case OllyDBG is not useful to debug the software.













Chữ k c nhn của arturo1000 The life is the life, the idea is the idea, the life of every men is a encoded idea.

  Reply With Quote
The Following User Says Thank You to arturo1000 For This Useful Post:
Old 26-08-2016, 09:45 PM   #5
User Profile
TechLord

 
TechLord's Avatar
 
Join Date: Tue Jul 2015
Posts: 27

Cấp bậc: 3 [cin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1teamcin1team]
Sức sống: 0 / 73
Hoạt động: 9 / 384
Kinh nghiệm: 93%


Thanks: 6
Thanked 36 Times in 12 Posts
Default

Use a .Net debugging/Reversing tool like Reflector (do a search and you can find patched versions very easily) or DnSpy for example, as Olly is not very efficient for .Net programs.

You can use Ida Pro for a prelim anaysis first...
  Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +8. The time now is 05:43 AM.


Powered by vBulletin® Version 3.xx
Copyright ©2000 2017, Jelsoft Enterprises Ltd. Help
Licensed to: cin1team.biz