Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-20-2002, 18:57
NE1
 
Posts: n/a
tips?

Hi, I am trying to reverse the protection a program (GU1TAR PR0 3), and have hit a road block.
The protection works like this:
Name and 15 digit Serial number.
Name is read in and a checksum is calculated from the name.
The Serial is read in and checked using the following format.
((1st digit + 2nd digit) * checksum from name) mod 10 = 11th digit
((3rd digit + 4th digit) * checksum from name) mod 10 = 12th digit
((5th digit + 6th digit) * checksum from name) mod 10 = 13th digit
((7th digit + 8th digit) * checksum from name) mod 10 = 14th digit
((9th digit + 10th digit) * checksum from name) mod 10 = 15th digit
Now using the above, and the checksum from whatever name I use, it is easy to calculate a serial that passes the check. Many different Serial numbers would work. Problem is only one is the correct one. Now if I just use any serial number that passes the above requirements, the program accepts it, continues to load, saying that it is registed to whatever name I used, but then exits without any messages (a serial number that failed the above checks would prompt with invalid liscence and let you try again).
Anyway, it is obvious that there is another check somewhere that puts further restrictions on the format of the serial, but with no messages, etc, I am having trouble locating where this is done.
Has anyone dealt with a similair protection scheme, that might be able to offer some tips as to what to look for.
Reply With Quote
  #2  
Old 08-21-2002, 01:42
Vox Humana
 
Posts: n/a
Only a suggestion

If the program spontaneously exits, most probably it will call ExitProcess or TerminateProcess. BPX on them, then check the stack.
Hope it helps
Reply With Quote
  #3  
Old 08-21-2002, 18:38
xobor xobor is offline
Friend
 
Join Date: May 2002
Location: Slovakia
Posts: 101
Rept. Given: 6
Rept. Rcvd 4 Times in 4 Posts
Thanks Given: 1
Thanks Rcvd at 9 Times in 6 Posts
xobor Reputation: 5
also maybe BPM RW on memory location where your serial resides can help you

regards
Reply With Quote
  #4  
Old 08-27-2002, 03:45
NE1
 
Posts: n/a
Thanks for the suggestions. I was able to find what I need to, by using PostExitMessage, and have since completed reversing the protection scheme.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IDA SDK C++ tricks and tips chants Developer Section 4 08-16-2019 13:16
Need some tips on in memory patching of a .Net dll Sailor_EDA General Discussion 4 05-30-2011 22:27


All times are GMT +8. The time now is 11:41.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX