Hi,

I'm a beginning cracker and I have a few questions.

1.) If there's no text like 'Invalid key' in the asm code (W32Dasm), then how do I know where to begin?

2.) Is it possible to just get one serial of an app without creating a keygen?

Thanks in advance,
Seech0r

You should start by providing more details on what you are dealing with, without mentioning commercial app names.

For instance I would venture that your app ask for a serial, then shows you a sign saying 'invalid key', but you cannot find those words in the disassembly. . .

right?

the 'invalid key' string may be:

in unicode: W32Dasm does not understand unicode.

Encrypted: to prevent people like you to have an easy ride

in another module: the key validation may be processed by code present in a dll or other import modules, so you are barking in the wrong tree, or disassemling the wrong module.

Or combinations there-off.

What to do? rethink you attack:
If the program shows the 'Invalid key' in a message box, look for API that display message boxes.

That 'Invalid Key' sign could be considered a nag screen.
read about nag screen in a basic tutorial and find ways to locate the code that generate and destroy nag screens.

The serial evaluation code should be related to the nag code.


2. Yes you can fish one single serial, or modif the app to accept any serial without writing a keygen, which is more involved

And how is it possible to get just one serial?

You didnt answer naides questions.

Woodmann

Lately a lot of the stuff I've been looking at has all the nag text buried in the resources section - so you need to find a different approach - lotsa tuts out there.

SiGiNT