Help-Inline Patching ASPACK 2.12(System Mechanic 4.0h)

Target: System Mechanic Personal Edition Version 4.0h (As on 30/03/2004)
Download Target: h**p://www.iolo.com/sm/4/download.cfm

Protection: ASPACK 2.12 and Serial. . Here what u do to beat this proggie.
Thanks SatyricOn for your lesson no. 2 : Find one place where the "IsSystemMech4Registered" & "IsRegistrationKeyValid" is located and patch it. Gee..i found it the kiddie way

004D6423 0F84 80000000 JE SysMech4.004D64A9

Change to

004D6423 |. 0F84 7C000000 JE SysMech4.004D64A5

I tested it and found no bug.

I tried inline Patching ASPACK'd System Mechanic but it will not allow me to copy the changes to executable. Can u guys tell me why? Temporary injection of my own code and running in Olly, the software will run registered killing all nags. But it will not allow to make changes permanent.

This is how i inject my code and it works. The app runs registered
00C704FE 68 E4666900 PUSH SysMech4.006966E4 (Signature bytes)

006966E4 C605 25644D00 >MOV BYTE PTR DS:[4D6425],7C
006966EB 68 C4666900 PUSH 006966C4 ( Real OEP)
006966F0 C3 RETN

Now if i try to make the changes permanent it will tell me that the data not found in the executable and will disable the "Copy" & "Copy All" button.
I'm using Olly v1.10 Step 2
How can i do it in Olly if i don't want to use Hiew
Someone plz explain
Regards,

Seems to me like your trying to patch it after its already started its unpacking procedure, meaning those address's dont actually exist in the executable so OllyDBG is unable to write the changes, my best guess anyway.

Just change the 00C704F4 75 08 JNZ SHORT SysMech4.00C704FE
to jump to your custom code then, jump back when it's executed.


Edit: Here's my solution.

00C704F4 E9 073E0100 JMP SysMech4.00C84300
00C704F9 90 NOP
00C704FA 90 NOP

00C84300 C605 25644D00 7C MOV BYTE PTR DS:[4D6425],7C
00C84307 ^E9 F2C1FEFF JMP SysMech4.00C704FE

Thank you both Mr.Anonymous and SvensK for ur help

Svensk i'l try ur solution and hopefully it will work

Regards,

It's even easier to serial fish this baby. Took a few minutes.

Name: SvensK [pH]
Serial#: 74758-S4565-4654558635

Now you don't have to patch the exe at all. Enjoy

Hi,
It seems u use the point-H method but i when i used the same method it didn't show me the real serial only shows me the fake serial i enter..strange. So thats why i opted to patch it. Anywayz i did learn how to inline patch ASPACK
Thanks

Regards,