Reply to thread

Message: <blockquote data-quote="Supunqw" data-source="post: 8641556" data-attributes="member: 225222">Cracking WinRAR Tutorial                                                                                            Author: Jakash3Typed December 05, 2009This tutorial will show you how to remove the 40 daystrial timer for WinRAR 3.71 (using the method shown inthis tutorial, you may also try to crack newer versionsof winrar, but for now I will just use version 3.71) andcreate a patch for it.<a href="http://www.mediafire.com/?2v4zzzhngnm" target="_blank">Download this</a> which includes the following for what you need:<ul> <li data-xf-list-type="ul">WinRAR 3.71 Trial Version</li> <li data-xf-list-type="ul">Disassembler: HDASM (Hacker's Disassembler)</li> <li data-xf-list-type="ul">Hex Editor: HIEW (Hacker's View)</li> <li data-xf-list-type="ul">Patch Creator: dUP (diablo2oo2's Universal Patcher)</li> </ul>First open the wrar371 setup file to install WinRAR. Now open WinRAR, andas you can see, there is the notice that comes up that says that you have40 days to evaluate WinRAR then you have to buy it.<a href="http://jakash3.wordpress.com/files/2009/12/wctutimg11.jpg" target="_blank"><img src="http://jakash3.wordpress.com/files/2009/12/wctutimg11.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a>First before doing anything, make a copy/backup of WinRAR.exe "C:\Program Files\WinRAR\WinRAR.exe".Now we will disassemble WinRAR. So open HDASM and through here, loadthe copy of WinRAR.exe that you created, don't worry about the settingsfor disassembling; just stick with the default and click Disassemble. Onceloaded, we will look at the dialog box references of this program; the onethat we will try to find is called (by window title) "Please purchase WinRARlicense" (the dialog we see when we open WinRAR). To see this list ofdialogs, click 'D' on the toolbar. Now search for the dialog by typing in thesearch bar "Please purchase WinRAR license". Of course, you don't have totype the whole thing: once you have typed 'Please pur' it will index to theonly possible item for what we are searching for. When indexed you will seethe ID keyword next to it which in this case is "REMINDER". Now we cantake this ID and search for it in the disassembly. Exit the dialog referencesbox and click 'S' (for search string references) on the toolbar and search for"REMINDER" w/out the quote. Double click on the result and it will bring tothe offset address 0043FF47, please make a note of this address. <a href="http://jakash3.wordpress.com/files/2009/12/wctutimg2.jpg" target="_blank"><img src="http://jakash3.wordpress.com/files/2009/12/wctutimg2.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a>At this address the instruction is 'push 004A8AA0', if you go to the004A8AA0 address in the file (with a hex editor) you will see that all the hexbytes [up until the hex 00 (null termination)] spell out 'REMINDER' in ascii.And remember that this is an ID for the trial reminder dialog box. on thesecond to next instruction you will see a call to USER32.DialogBoxParamAexternal library to show and execute the functions of the trial reminder boxthat was pushed to the stack for one of the arguments.Now that we know the address of where this dialog comes in we can modifyit to take it out by replacing the instruction 'push 004A8AA0' with 'nop''s sowhen the library call is executed it will return nothing since the ID of thedialog template is not specified. A hex editor is required for the rawmodification of files. So we shall exit HDASM and drag and drop WinRAR.exeinto HIEW to load the hex dump and disassembly of WinRAR into HIEW(HIEW32.exe). Now after you have loaded WinRAR into HIEW press F4(mode) and select decode, press F5 (goto address) and enter '.0043FF47'to go to the address of the REMINDER dialog setup. Once at this address,press F3 to edit, and type 90 five times to replace 'push 0004A8AA0' with'nop {newline} nop {newline} nop {newline} nop {newline} nop', nop meansNo Operation it will perform no instruction; it's just a byte to take up filespace. <a href="http://jakash3.wordpress.com/files/2009/12/wctutimg3.jpg" target="_blank"><img src="http://jakash3.wordpress.com/files/2009/12/wctutimg3.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a>Press F9 to update. Finally we have a cracked version copy of WinRAR! Optionally we can makea patcher for this so when you re-install the trial of winrar 3.71 again, youcan just open the patcher in the same directory and winrar will be modifiedagain for the crack, instead of going through what we just did all overagain. This patch will be made with dUP. Before starting, we should have our patched cracked version of WinRAR.exe(which we just made) and the original WinRAR.exe file that is not cracked.First to make a winrar crack patch open dUP and select New Project.From here just enter patch info to show to the user before they executethe patch. After saving, click Add and select [offset patch]. Edit the offsetpatch data by double-clicking [Offset Patch] in the listbox. The file that wewant this program to patch is WinRAR.exe, so browse and select the originalWinRAR.exe file for the Target File. And instead of entering the offset, theoriginal byte, and the patched byte, we will just compare the orignalWinRAR.exe file to the cracked WinRAR.exe. Do this by going to theCompare Files groupbox and enter the orignal winrar and our patched winrarfor the appropriate fields and click Compare. Now that the file knows whatto patch we can save this, click save. <a href="http://jakash3.wordpress.com/files/2009/12/wctutimg4.jpg" target="_blank"><img src="http://jakash3.wordpress.com/files/2009/12/wctutimg4.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a>Finally, click Create Patch. The patcher file will be created in your specified directory, after refreshingthat directory you should see it. Congrats on creating your WinRAR 3.71Patch Crack! As said earlier, after you install the trial of winrar 3.71 justopen the patch within the same folder as WinRAR.exe and patch it.Well that is my tutorial on cracking winrar, if you follow this example nicely, you can find that you can crack (or patch) newer versions of winrar using the same method. Good luck!</blockquote>

Verification: Asuwa dahayen wadi kalama keeyada?

Top Bottom