DISCLAIMER
This file is for educational
purposes only and it is not illegal in any way. You must understand that
this file may be illegal if you use it in any other way except the educational.
DON’T USE CRACKED PROGRAM. If
you like it BUY IT !!!
Hello to all of you. I am pretty sure that you want
to learn Art Of Cracking. (Please forgive me on my lame English but I hope
you'll understand).
Yesterday I've cracked one very stupid program.
It was Auscomp's 1st Java Navigator ver. 5.0.1.493 (It is a
piece of shit). Cracking this stupid program was unbelieveably easy. OK,
let’s start with tutorial.
First you need these tools:
-W32Dasm (I use version 8.93)
by UrSoft Corporation. It is nice disassembling program and it is freeware
(it would be very stupid that the program of this kind is shareware).
-Hiew (I use v.6.15); or Hex
Workshop; or some editor like UltraEdit (it is shareware), but I still
think that Hiew (for DOS) is the best
-And the least but not less important is PC
(If you are reading this tut on some kind of screen than this problem is
solved)
The reason I don’t use SoftIce is because I find this
program very stupid, and difficult for use.
Step one:
OK, let’s see the look of Java Window before cracking:
Of course, the Evaluate button is disabled and there
is no way of using this program.
Open the program in W32Dasm (First button Open file
to disassemble), but first CLOSE THE JAVA WINDOW. Don’t make panic if disassmebling
is lasting long, just wait, in most of cases W32 needs to read more than
20000 strings.
The W32 window looks like this:
Then click on String Data References button. It is
one before the last button (print).
You should see something like this:
Now, scroll down and read carefully the messages.
You are looking after something like this:
Evaluate, registered … Oh, look at this, these are
Evaluation version and than Registered version messages.
Double click on Evaluation version and you
are brought on this screen below
Look at the string which follows Referenced by a
U or C J at A , it is number 0047232F.
Now, press Shift + F12 (Go to Code Location). Type
in number 0047232F. You are on green highlited line which says:
:0047232F0F85AA010000 jne 004724DF |
Look at the bottom of W32 window. It says:
Line:249544 Pg 2971 of 4052 Code Data @:0047232F
@Offset 0007172Fh in File: Java.exe
The
Offset followed by numbers is very important
for us. It means false address.
Number: 0007172Fh is the number we need.
Write it down. Now you can exit W32, better saying you must.
Start
Hiew.exe
Then find dir with your proggie and select java.exe
.You should see this
Don’t be surprised , this is normal. Now press F4
(Mode) and select Decode. Press F5 (Go to Code Location). Type in the number
which you’ve wrote down bau without 000 and h (7172F).
You are at line:
.0047232F: 0F85AA010000
jne .0004724DF --------(1)
This jne we must translate into je. We can do this
with pressing F3 (Edit) and instead of 85
we will type 84. Now press F9 (Update), and
exit Hiew with Escape.
If accidentaly Hiew didn’t let you edit file (If
you saw message General failiture, read only mode) it means you didn’t
exit W32 and program you want to crack. You must exit
W32 and Java
Navigator. Now start your Java Navigator. It looks like this:
Congrats, you did it.
As you can see it is cracked press start and gooo!
Now it says registered. This was very easy.
There is no need for thanking, just keep cracking.
TIJANA BAJOVIC
Click
here to see my WinRar and Hex Workshop cracking tutorial.