Question about DLL's

kevink9 · 07/27/2011, 12:01

Hey all,

Is it possible to change an activation key from a dll so lets say from F1 to F2?
If it is could someone write a small tutorial how to do this or link me an excisting tutorial if there is one (didn't find any on here) I would really appreciate it.

Thanks,
Kevin

~~MoepMeep~~ · 07/27/2011, 12:47

hex editor, hf :>

RunzelEier · 07/27/2011, 13:05

das ist ja wohl mim debugger einfacher -.-
intermodular calls -> GetAsyncKeyState -> tada!

kevink9 · 07/27/2011, 13:18

Quote:

Originally Posted by RunzelEier

das ist ja wohl mim debugger einfacher -.-
intermodular calls -> GetAsyncKeyState -> tada!

mhh in english please xD
i can read some german but not much ^^

-----------------------------------------------------
and what is a good Hex editor or it doesn't matter?

RunzelEier · 07/27/2011, 14:56

english:
debugger
intermodular calls -> GetAsyncKeyState -> win

kevink9 · 07/27/2011, 15:00

Quote:

Originally Posted by RunzelEier

english:
debugger
intermodular calls -> GetAsyncKeyState -> win

mhh I don't understand that
what debugger? this is with microsoft visual studio or?

Can I maybe pm you my MSN?
That works better for if i have some questions.

RunzelEier · 07/27/2011, 15:22

no, you can use any kind of debugger. e.g. OllyDbg
load the dll and search for all intermodular calls.
if the dll is crypted you first have to decrypt it.
google is your friend

kevink9 · 07/27/2011, 15:30

Quote:

Originally Posted by RunzelEier

no, you can use any kind of debugger. e.g. OllyDbg
load the dll and search for all intermodular calls.
if the dll is crypted you first have to decrypt it.
google is your friend

Ok thanks alot for the help
Ill go try some

Ok I think I found the "GetAsyncKeyState" but i have no clue what to do now.
Can you give me a hint. I cannot find anyting on google about what to do after this.

Thanks,
Kevin

RunzelEier · 07/27/2011, 23:26

the parameter gets pushen on the stack.
change the parameter to change the hotkey.

e.g.
push 0x39 <- change this to the key you want
call GetAsyncKeyState

here is a list of key codes:

kevink9 · 07/27/2011, 23:35

Quote:

Originally Posted by RunzelEier

the parameter gets pushen on the stack.
change the parameter to change the hotkey.

e.g.
push 0x39 <- change this to the key you want
call GetAsyncKeyState

here is a list of key codes:

This is what im getting in ollydbg

im probably doing it all wrong xD

RunzelEier · 07/27/2011, 23:43

search for all intermodular calls

send me the dll and i will make it.
just tell me which key you want

kevink9 · 07/27/2011, 23:47

Quote:

Originally Posted by RunzelEier

search for all intermodular calls

send me the dll and i will make it.
just tell me which key you want

ya i know that but when i search for intermodular calls i dont get any "getasynckeystate" so i went to look at some other places and i found it there

RunzelEier · 07/27/2011, 23:51

if there is no getasynckeystate call, you have to find another call.
e.g.
GetKeyboardState,
GetKeyState,
...

Edit:
guess what i found

and guess what you have to do.
and there is also the pattern he uses to hook send

armer striker, seine dlls werden vergewaltigt

kevink9 · 07/27/2011, 23:55

Quote:

Originally Posted by RunzelEier

if there is no getasynckeystate call, you have to find another call.
e.g.
GetKeyboardState,
GetKeyState,
...

this is what i get at the calls list

RunzelEier · 07/27/2011, 23:59

do you open the version.dll?
and you are in the right modul?