|
Tools you need: For tools you
need WinIce and a Hex-Editor. My recommendation on a Hex-Editor is Hacker's
View. If you can't get these tools yourself, ask for it in a Cracker-Channel..
|
Babylon is Freeware but does still
expire after a trial (?) period of 100 days. You can update this trial
period, by downloading an update from the Babylon Ltd. Website. People
like you and me don't want to update Babylon always. You should know why
I cracked a Time Limited Freeware Program - the first program with time
limitits in a freeware program I've ever seen. I think you've read the
"Cracker's Notes", so that we can start now. Don't ask me for the notes,
find it yourself or ask in a cracker-channel ...
Step 1 Install Babylon and have a look at the about-window. You've seen the message "You've x Days left ...". Ok. Exit Babylon. Set your date at least 101 days ahead. Have you seen the error message that Babylon has expired? Press OK and then let's go. From my other tutorials, you know that I always have a look at the imports and exports, because it saves me much time. ADAVPI32.RegCloseKey
This are the most interesting functions. But we know that they can't check a date. They can just restore program settings. Ok now look at the CAPTLIB.DLL. IsBabylonPastExpiryDate
Have you seen this "IsBabylonPastExpiryDate"? Ok course you have. You know what this means? Yeah! Copy CAPTLIB.DLL to C:\. Edit your WINICE.DAT and add a line with EXP="C:\CAPTLIB.DLL" to load CAPTLIB.DLL with WinIce. Restart your computer and don't forget to load up WinIce.
0137:00AA141B FF75E8
PUSH DWORD
PTR [EBP-18]
Now you know that the value is compared
and if it's there are no days left, the message box will be displayed.
So crack this first. Change the conditional JZ 00AA1458 to JMP 00AA1458.
You can try what happens, if the zero flag is set/not set with
0137:00AA11F0 E851C80000 CALL KERNEL32!GetSystemTime Now you know that the time is checked
here. Now have a look at the ESI-Register while you step through the code
(F10).
0137:00AA12B9 7D0A
JGE
00AA12C5
This JGE means: If the Date is the expired-date or if it's later, don't enable Babylon ... and if it's not, go ahead and enable Babylon (JMP 00AA141). So you can change the ESI-register to test if it works or you can type "A" and then "NOP" (Enter) "NOP" (Enter) (Enter). Then Babylon will be full functionally.
|
Back to Students Essay's |