Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse/Social Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 08-21-2008, 01:31 PM
coool.aman coool.aman is offline
Junior Member
 
Join Date: Aug 2008
Posts: 2
Lightbulb Triple Registration Scheme Armadillo 3.7x Target(Advice Needed)

Recalplus V4


The Target RecallPlus is armadillo protected Triple Registration Scheme Software.Its crippled ware which has features like gatherer,proper testing,animation,mp3 notes etc disabled. It has 14 days trial after which testing is completely disabled.

My findings:

1) Registration-There are two options of registration

->Online Using Help>Activate
It can be registered to three type of editions
namely essential,professional,expert
with third being the best.

->In same way Using a license file which is to
be recieved after sending a request file generated
by this software.
OPTION is in tools>Email Activation

->Third it can patched by removing those nags
which appear which appear when we try to use those
nags which appear which we try to run features like
Gatherer,Animation,Sound and testing(After Trial Over).

2)I have tried in all of the three above fields From a lot of days by trying the most in 1st and 3rd Field.


[i]

Problems in Activation Using Online The Program Sends a command

"<Password>1234</Password><iPresentEdition>-1</iPresentEdition><iEditionRequest>3</iEditionRequest><F"

Here Editions lite(Limited),essential,professional,expert are no.-1 to 3 Respectively

In return it sends Fields with Result,Keyconfirmedvalue,problem,etc etc taken by the procedure and processed



SO If i patch it not to communcate with the server a command with all this is not at all
recieved and I do get a message with 0 level patching but doesnt register that is obivious

THE PROBLEM HERE IS I STILL COULDNT RECOGNIZE THE PROCEDURE WHERE IT ACTUALLY HAPPENS
TO CHECK REGISTRATION DATA AND ITS DEPTH FROM THERE.

THERE ARE VARIETY OF ERRORS GENERATED ONCE I GUIDE THE PROCEDURE LIKE IMPOSSIBLE ERROR ETC

[II]

Problem when removing Nags:-



The nags appear when we activate any restricted function above mentioned.All Nags are created after
entering by not jumping at VA 4CB1E0 by taking a Jump Table at 4CB213.Jump at VA 4CB1E0 decided
by EAX.A call(4CB1D1) before Jump at VA 4CB1E0 Just Before CALL Return Pushes 10 to esp and returns somewhere else
which is a long way before it return to statement next to the call at 4CB1D6 returns.With some eax value deciding it value for Jump table.

Its a continious loop keeps on running and Jump at 4c81E6 is not taken only when NAG IS TO BE CREATED.I couldnt trace where this value is decided and how to redirect.


If Jump i can remove the Nag but still can't run the features.

Two Other Things I was able to patch was bring Expert Edition and Remove "Click Here to activate>better marks" at starting of screen.

3)

ANY HELP ABOUT THE BEST METHOD TO GO FOR IDEAS TO FIND THE REAL PATCH POINT WILL REALLY BE APPRICIATED.ANALYSE AND SHARE WITH ME PATCH POINTS IT SHALL ADD GREATELY TO MY KNOWLEDGE.WITH MY PRESENT KNOWLEDGE I AM UNABLE TO FIND AND BUT STILL TRYING.I HAVE LEARNT FROM MASTER OF THIS KNOWLEGE LIKE [MISTER X] [LENA 151] ... THANKS I HOPE I LL GET USEFUL TIPS

4)

->I AM INCLUDING THE SETUP FOR VERSION OF SOFTWARE I HAVE(19 MB )
http://drive.123-reg.co.uk/F/61529-180543245

->MY UNPACKED EXE(I U DONT WANT TO UNPACK URSELF 10MB APPROX)
http://drive.123-reg.co.uk/F/61529-180547057

->SOFTWARE I USED TO UNPACK THIS AND REMOVE NANOMITIES Armageddon_v1.3.3( 0.5 MB)
http://drive.123-reg.co.uk/F/61529-180536359

I UNPACKED IT USING SOFTWARE Armageddon_v1.3.3 AND IT DIDN'T REMOVED PROTECTOR SECTIONS MAY SO ITS UNPACKED VERSION EXE IS LARGE(10MB).

I WILL KEEP ON UPDATING WHAT I FIND NEW IN THIS PEOPLE WHO GET SOMETHING NEW INTERESTING OR THINK MAY HELP PLEASE LEAVE YOUR IDEAS,TIPS HERE THANKS....


WITH REGARDS
AMAN

http://forum.astalavista.ms/viewtopic.php?t=190577
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.