Results 1 to 4 of 4

Thread: Help with Ultra Edit ver 7.20a

  1. #1
    xOptiMus
    Guest

    Help with Ultra Edit ver 7.20a

    Hi all

    I've just managed to patch the latest version of Ultra Edit ver 7.20a. However it was'nt my intention to patch it, I started out fishing for the serial, but after a few days of no luck decided to make do with patching it.

    I'm usualy quite good at tracing serials, but this prog has so far beaten me! I just can't seem to even get near to it. I know the damn prog must check the serial that I enter with the real one somewhere - but where, I just do not know!

    Can anyone give me a hint as to where I should be looking for this serial check? Is there some method I can use to track it down? I've tried breaking on hmemcpy, GetWindowTextA, GetDlgItemTextA etc, but they don't work. After entering a username and serial the prog informs you that it must shut down to check the serial, so I guess that it must do it's check when you restart it.

    Please can someone help, I'm clean out of ideas.

    xOptiMus
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    tsehp
    Guest
    maybe yes, maybe not.
    One method is to freeze the target just after entering the serial, you can do a bmsg on the button's handle, check for hwnd command in sice, good doc about it on cracker's notes.
    Then you bpmb or bpr it, meaning that a read or write access to the serial you entered can lead you to the check routine.
    win32 api's can copy it a lot into several mem locations before, so take a good trace of where it was copied.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    witch
    Guest
    Try to intercept WM_CHAR message.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Instructor
    Guest
    Hi, I can send you an own tutorial about
    cracking this, but sorry only in german.
    I think, the String data ref will help you.

    Please give me your email-adress, if you want it.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. lARP v2.0 Ultra
    By lena151 in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: April 27th, 2008, 10:25
  2. Sentinel Ultra Pro cracking
    By marko in forum The Newbie Forum
    Replies: 19
    Last Post: December 13th, 2007, 18:24
  3. Cool Edit Pro Demo?? or Cool Edit???
    By crUsAdEr in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: February 14th, 2002, 16:57
  4. Ultra IdeAsm
    By vgb in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: August 23rd, 2001, 11:20
  5. Help with Ultra Edit ver 7.20a
    By xOptiMus in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: December 14th, 2000, 18:43

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •