Tutorial for GetRight 4.3 


Tutorial by NeO'X'QuiCk
URl:http://www.tucows.de/

Used tools:
Win32d,
HexWorkshop(or any hexeditor)

Level:1

*********************************************************************************

1:Register the GetRight 4.3

*********************************************************************************



--------------------------------INtroduction-------------------------------------

This is a very usefull program and a lot of people use it!But it's a shame that it's not better encrypted and protected!!Lame Programs!!Let's start!Make a copy of Geright.exe I made crack.exe in case something goes wrong!!And copy it to another directory!
Start getright.exe!In Help menu you got About!Press it!!YOu can see Unregistered!!Close the prog..


---------------------------------------------------------------------------------


I opened the Win32D dissasemble the file!!(crack.exe)!You must wait a littel time!! Then use String Data ReferenceS(Second Button from left to right)!
You get a new window of string and look for You Have Registered...
If you don't find it's number 327!(In the window Press it)! 



*********************************************************************************
Solution for task 1:Registered GetRight 4.3
*********************************************************************************

You get Here!!




:00401716 E8B4EE0700              call 004805CF
:0040171B 85C0                    test eax, eax
:0040171D 745A                    je 00401779        //*Important *//
:0040171F 8D45EC                  lea eax, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00327: "You Have Registered GetRight.  Thank You!"

:00401722 6847010000              push 00000147
:00401727 50                      push eax
:00401728 E8BA900B00              call 004BA7E7


Press on line 0040171D and at the bottom of window you can see Offset code 00000B1D!!REmeber it!
Then go to HexWorkshop!Open it the file getright.exe!In Edit menu use Goto (or Alt+F5)!Write in window B1D and press go!!Here you come!!





140E 008D 4DE8 E8B4 EE07 0085 C074 5A8D //*The important is 745A , you land infront of 74*//

You have to change 74 to 75 !!Because 74 means jmp if Equal or je and we change it to 75 which means jmp in NOT Egual or jnz!!After changing it looks like this in hexWorkshop!

140E 008D 4DE8 E8B4 EE07 0085 C075 5A8D //*Atfer Change C074 is C075*//



Save and exit!!Start the program and you have REgistered The Getright 4.3!!Heh!"
Like i said very usefull prog. but again lame programers!Do better next time!!

*********************************************************************************
*********************************************************************************

Special Thanks to Corbio,Batilog to make my cracking skill become better !
And GreetZ to Acid_Cool_178, Fr1c,to all members of NC,GC,UCC...and all that i have forgotten!!

SOrry about grammer mistakes!!


By NeO'X'QuiCk