This tutorial are coming from
Acid Cool 178
Tutorial Number 52
Target
Program_____________ WinRAR Version 2.71 Protection___________ Time Trial in 40 Days / Keyfile Downlaod it at ______ rarsoft.com Date________________ 21 June 2000
Toolz
W32Dasm
Hex Editor
Essay
Well, WinRAR ARE one of the BEST tool in the world, they have one easy protection and nice to handle your zip files with, winzip sux too much now, they have let the "Wanted" stuff gone in their head... Assholes, i liked WinZip Version 7.0
But WinRAR are getting better now, i remember rar2.exe, it was the best DOD packer that was for me, i can still use it.. I Loved that program, but now it are in 100% pure Win32 coding and not DOS...
When you have used WinRAR in 40 days so will you get one "Please Register" window, and that window will appear every time you are opening WinRAR.. So that sux, lets remove it, open WinRAR.exe in your W32Dasm ans search for "Please Register" Now you will land here..
011 - ControlID:006D, Control Class:"BUTTON" Control Text:"&No"
012 - ControlID:0070, Control Class:"BUTTON" Control Text:"No to A&ll"
013 - ControlID:0071, Control Class:"BUTTON" Control Text:"&Cancel"
001 - ControlID:0066, Control Class:"BUTTON" Control Text:"&Online registration"
002 - ControlID:0065, Control Class:"BUTTON" Control Text:"&Price list"
003 - ControlID:0067, Control Class:"BUTTON" Control Text:"&Sites list"
I have marked on the line where you will land, and try to search again, u won't fins any more hits, I have tried that.... Now look at the line, "NAME: REMINDER" let's try to search for "REMINDER" and now you will see this code...
:00401506 833DC0CC460000 cmp dword ptr [0046CCC0], 00000000 :0040150D 7546 jne 00401555 <-- Jumps Over the Reminder :0040150F 803D7430460000 cmp byte ptr [00463074], 00 :00401516 753D jne 00401555 <-- Jumps Over the Reminder :00401518 803DCC6C460000 cmp byte ptr [00466CCC], 00 :0040151F 7534 jne 00401555 <-- Jumps Over the Reminder :00401521 A1A8F54600 mov eax, dword ptr [0046F5A8] :00401526 83F828 cmp eax, 00000028 <-- Check the days, if over 40 days then jump to reminder, else jump over it :00401529 7F04 jg 0040152F :0040152B 85C0 test eax, eax :0040152D 7D26 jge 00401555 <-- Jumps Over the Reminder
* Referenced by a (U)nconditional or (C)onditional Jump at Address: |:00401529(C) | :0040152F C6057430460001 mov byte ptr [00463074], 01 :00401536 6A00 push 00000000 :00401538 68A8BA4000 push 0040BAA8 :0040153D 8B1524B94600 mov edx, dword ptr [0046B924] :00401543 52 push edx
* Possible StringData Ref from Data Obj ->"REMINDER" <-- The message we will jump over
|
:00401544 68E73B4600 push 00463BE7
:00401549 8B0D20CC4600 mov ecx, dword ptr [0046CC20]
:0040154F 51 push ecx
Well, to crack this so will we only need to change the fisrt jump from JNE to JMP, and JMP have the opcode "EB" and JNE have the opcode "75" so open WinRAR.exe in you hex editor and search for "46 00 00 75 46 8D 3D 74 30" and change it to "46 00 00 EB 46 8D 3D 74 30",,, save it and run the program.. Now the Reminder will be gone from our mind ;) Nice and easy...
But WinRAR aren't complete yet, look in the title of WinRAR, you can see this message WinRAR (evaluation copy) and what the fuck are this.. In W32Dasm begin an search for "evaluation copy" and you will land here..
* Possible StringData Ref from Data Obj ->"%s - WinRAR"
|
:0041BA01 68DD5F4600 push 00465FDD
:0041BA06 8D9500FEFFFF lea edx, dword ptr [ebp+FFFFFE00]
:0041BA0C 52 push edx
:0041BA0D E8820B0400 call 0045C594
:0041BA12 83C40C add esp, 0000000C
:0041BA15 803DCC6C460000 cmp byte ptr [00466CCC], 00
:0041BA1C 752E jne 0041BA4C <-- This must be activated 4 ever
* Possible Reference to String Resource ID=00873: "evaluation copy"
|
:0041BA1E 6869030000 push 00000369
:0041BA23 E894C6FEFF call 004080BC
:0041BA28 50 push eax
The jump at location 41B1C are not executed when u are running winRAR, so let make it to be executed and the "Evalution Copy'" shit will be far away from our mind...
If you want to make ti so just Change JNE to JMP, u now how, look in this tutorial, the answer are easy :)
Good Luck Cracker... One day u can be an Elite Cracker,, if so, please join Hellforge, we need crackers....
Ending
Well, WinRAR must be one om my favourite program's to crack, i have fixed their newest version again ;) smood :D
a new crack for The Cracking Answer are done and this text are going to Hellforge, We in Hellforge needs some active ppl right now, please join us...
LaZaRuS, Wajid, Borna Janes, ManKind, Eddie Van Camper, ACiD BuRN, KoRnFLeX, Eternal_Bliss, Potsmoke, DiABLO. Torn@do, ^AlX^ , AC|D, Dark Wolf, Marton and all the other i have forgotten