Results 1 to 8 of 8

Thread: How to read an *.ini with OllyDBG.

  1. #1

    How to read an *.ini with OllyDBG.

    Hello,

    I have an *.exe which reads after starting an *.ini. This ini has some parameters - one of them is SN (Serialnumber).

    In case you enter a SerialNumber in the program, you are only asked to restart the program. Means, I think that the process to verify the serial is only used after starting the *.exe. Unfortunlately you will not get a "error message" or "error screen" after inserting a wrong serial number. This means, I am not able to look for a MessageBox.

    In case you have no or a wrong serialnumber, you will get a "Wait screen" - starting with 10 sec. for each action.

    Is someone in this board willing to help me ?



    reagards kuzco

  2. #2
    |< x != '+' BanMe's Avatar
    Join Date
    Oct 2008
    Location
    Farmington NH
    Posts
    510
    Blog Entries
    4
    well im not "willing to help",but I like to 'help'. ;p

    bp on ReadFile..find xrefs to the buffer.

    this should lead you to the area where it compares the sn in the exe..unless they send it out over the internet for verification..good luck..

    regards BanMe
    No hate for the lost children;
    more love for the paths we walk,
    'words' shatter the truth we seek.
    from the heart and mind of Me
    me, to you.. down and across

    No more words from me, to you...
    Hate and love shatter the heart and Mind of Me.
    For the Lost Children;For the paths we walk; the real truth we seek!

  3. #3
    err read file on an ini? doubt it...

    probably GetPrivateProfileString ... would be more logical

  4. #4
    |< x != '+' BanMe's Avatar
    Join Date
    Oct 2008
    Location
    Farmington NH
    Posts
    510
    Blog Entries
    4
    ahh after doing a little lookup on GetPrivateProfileString you are indeed correct, that would be a more logical choice to bp on..to find the buffer used for storage after verifying GetPrivateProfileString is used though.. a bp on NtReadFile should work...my bad..

    BanMe

    https://www.openrce.org/forums/posts/1139
    No hate for the lost children;
    more love for the paths we walk,
    'words' shatter the truth we seek.
    from the heart and mind of Me
    me, to you.. down and across

    No more words from me, to you...
    Hate and love shatter the heart and Mind of Me.
    For the Lost Children;For the paths we walk; the real truth we seek!

  5. #5
    Or you could just use the buffer that is passed to GetPrivateProfileString (4th argument) to receive the result which, in this case, will be the serial number.

    I doubt NtReadFile would be useful, as that would only be used internally and then partial contents copied to the passed string above.

  6. #6
    You are my man

    GetPrivateProfileStringA was the solution !

    Many thanks.

  7. #7
    Hello,
    long time ago you all helps me to find a number for a *.ini with ollydbg and GetPrivateProfileString.
    Now I have chnaged my PC and I have to reasd it again.

    Unfortunately I can not remmber how to do it:
    1. Have started ollydbg
    2. open the *.exe
    3. F9 (for run)
    4. ???

    Where can I insert the "search for" GetPrivateProfileString ?

    Any hint is welcome .

    thanks
    kuzco

  8. #8
    Please ignore (more or less) my last mail.

    The *.exe was packed with UPX. After unpacking I was able to search for GetPrivateProfileStringA.
    Unfortunaltely I am not able to find the SN again.

    Can someone give me a hint ?
    Whole program has only 1 MB.

    regards
    kuzco

Similar Threads

  1. OllyDBG and a VB exe
    By field3d in forum OllyDbg Support Forums
    Replies: 3
    Last Post: September 6th, 2010, 16:22
  2. OllyDBG conditional BP help
    By james in forum The Newbie Forum
    Replies: 12
    Last Post: May 7th, 2009, 05:17
  3. OllyDBG offset ?
    By Anonymous in forum OllyDbg Support Forums
    Replies: 1
    Last Post: December 8th, 2004, 10:22
  4. Olly needs your help with OllyDBG 2
    By Harding in forum Off Topic
    Replies: 4
    Last Post: November 19th, 2004, 11:20
  5. 1.10c bug, crash OllyDBG
    By ssb in forum Bugs
    Replies: 7
    Last Post: May 16th, 2004, 23:51

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •