Log in

View Full Version : Serial check


Thickit
March 20th, 2002, 22:23
I have a app that checks to see if the correct drive is installed in the pc before starting up. I would like to remove this part of the program or trick it in to thinking the drive is there. Compleatly new to this I know its a pretty advanced thing I'm wanting to do. So what do I do first or where are there some real good information pages to start reading up on.

Thanx all

Woodmann
March 20th, 2002, 23:15
Howdy,
Whats the name of the app?

Peace, Woodmann

DakienDX
March 21st, 2002, 21:03
Hello thickit !

You should try to search for the vendor string of the drive you don't have in the program.
Since you probably don't know the exact string you should start with the manufracturer.
So if the software says "I will only run with a NEC DVD-ROM 13xx" for example, you should search for "NEC" or "DVD-ROM" or similar.
When you've found the string you can look for references to it to find possible compares.
Patch them and your software should work with the drive you have. (if it doesn't use some vendor specified functions)

Thickit
March 21st, 2002, 22:14
Thanx DakienDX I have now found out that it's been written in MS Visual c++ I have a copy of that on its way but my next question is can I open with this program and search / edit it or has it got to be Unpacked? Whats the best appz to poke around the program and alter it?

Clandestiny
March 21st, 2002, 23:49
Hiya Thicket,

My first suggestion would be to try to disassemble it using either IDA or Wdasm (protools.cjb.net for these tools) Once disassembled, you'll be able to search the string references and imported functions. This could give you some clues as Dakien suggested. As for knowing if it's packed... Well, attempting to disassemble it should clue you in since if it's packed you probably won't be able to get much of a meaningful disassembly.

Alternately, you could search through a raw hex dump of the file using a hex editor. At any rate, eventually you WILL need a hex editor to physically alter the code when you've found the patch point. Hiew (Hacker's View) is my hex editor of choice for patching, although you could also use UltraEdit, HexWorkshop, or the like...

Hope this gets you started...

Feel free to post your questions here if you get stuck on something.

Cheers,
Clandestiny

Thickit
March 22nd, 2002, 01:24
dissasembled using w32dsam the window shows nothing I can read its just squiggles but the refs menu does show me some infomation but even then I cant find any mention of the program checking for the drive. This is going to be a lot harder than I thought I'm not one to give up any pointers now.
Thanx Clandestiny nice site that m8..


Got my squiggles sorted out helps to choose a font DOH..

Thickit
March 22nd, 2002, 01:47
Wow much better can see quite a few refrences to the drive can somebody point me to the basic commands whats a push and a call??

Clandestiny
March 22nd, 2002, 02:03
Quote:
Originally posted by Thickit
Wow much better can see quite a few refrences to the drive can somebody point me to the basic commands whats a push and a call??


You're gonna need to spend some quality time with the AOA (Art of Assembly), my friend...

ht*p://courses.ece.uiuc.edu/ece291/books/artofasm/artofasm.html
ht*p://webster.cs.ucr.edu/Page_AoAWin/0_AoAHLA.html

Good Luck,
Clandestiny

Thickit
March 22nd, 2002, 02:17
Good luck...... gonna need it Thanx again m8

Thickit
March 28th, 2002, 22:15
Been trying my best to understand using the links from Clandestiny thanx again m8 but it's no good I need a DUMBO version any more links?