Question about DLL's

07/27/2011 12:01 kevink9#1
Hey all,

Is it possible to change an activation key from a dll so lets say from F1 to F2?
If it is could someone write a small tutorial how to do this or link me an excisting tutorial if there is one (didn't find any on here) I would really appreciate it.

Thanks,
Kevin
07/27/2011 12:47 MoepMeep#2
hex editor, hf :>
07/27/2011 13:05 RunzelEier#3
das ist ja wohl mim debugger einfacher -.-
intermodular calls -> GetAsyncKeyState -> tada!
07/27/2011 13:18 kevink9#4
Quote:
Originally Posted by RunzelEier View Post
das ist ja wohl mim debugger einfacher -.-
intermodular calls -> GetAsyncKeyState -> tada!
mhh in english please xD
i can read some german but not much ^^

-----------------------------------------------------
and what is a good Hex editor or it doesn't matter?
07/27/2011 14:56 RunzelEier#5
english:
debugger
intermodular calls -> GetAsyncKeyState -> win
07/27/2011 15:00 kevink9#6
Quote:
Originally Posted by RunzelEier View Post
english:
debugger
intermodular calls -> GetAsyncKeyState -> win
mhh I don't understand that
what debugger? this is with microsoft visual studio or?

Can I maybe pm you my MSN?
That works better for if i have some questions.
07/27/2011 15:22 RunzelEier#7
no, you can use any kind of debugger. e.g. OllyDbg
load the dll and search for all intermodular calls.
if the dll is crypted you first have to decrypt it.
google is your friend
07/27/2011 15:30 kevink9#8
Quote:
Originally Posted by RunzelEier View Post
no, you can use any kind of debugger. e.g. OllyDbg
load the dll and search for all intermodular calls.
if the dll is crypted you first have to decrypt it.
google is your friend
Ok thanks alot for the help
Ill go try some

Ok I think I found the "GetAsyncKeyState" but i have no clue what to do now.
Can you give me a hint. I cannot find anyting on google about what to do after this.

Thanks,
Kevin
07/27/2011 23:26 RunzelEier#9
the parameter gets pushen on the stack.
change the parameter to change the hotkey.

e.g.
push 0x39 <- change this to the key you want
call GetAsyncKeyState

here is a list of key codes: [Only registered and activated users can see links. Click Here To Register...]
07/27/2011 23:35 kevink9#10
Quote:
Originally Posted by RunzelEier View Post
the parameter gets pushen on the stack.
change the parameter to change the hotkey.

e.g.
push 0x39 <- change this to the key you want
call GetAsyncKeyState

here is a list of key codes: [Only registered and activated users can see links. Click Here To Register...]
This is what im getting in ollydbg

[Only registered and activated users can see links. Click Here To Register...]

im probably doing it all wrong xD
07/27/2011 23:43 RunzelEier#11
[Only registered and activated users can see links. Click Here To Register...]

search for all intermodular calls

send me the dll and i will make it.
just tell me which key you want
07/27/2011 23:47 kevink9#12
Quote:
Originally Posted by RunzelEier View Post
[Only registered and activated users can see links. Click Here To Register...]

search for all intermodular calls

send me the dll and i will make it.
just tell me which key you want
ya i know that but when i search for intermodular calls i dont get any "getasynckeystate" so i went to look at some other places and i found it there
07/27/2011 23:51 RunzelEier#13
if there is no getasynckeystate call, you have to find another call.
e.g.
GetKeyboardState,
GetKeyState,
...

Edit:
guess what i found :D
[Only registered and activated users can see links. Click Here To Register...]
and guess what you have to do.
and there is also the pattern he uses to hook send :)


armer striker, seine dlls werden vergewaltigt :D
07/27/2011 23:55 kevink9#14
Quote:
Originally Posted by RunzelEier View Post
if there is no getasynckeystate call, you have to find another call.
e.g.
GetKeyboardState,
GetKeyState,
...
this is what i get at the calls list

[Only registered and activated users can see links. Click Here To Register...]
07/27/2011 23:59 RunzelEier#15
do you open the version.dll?
and you are in the right modul?