Cracking plugins and .dll files

**Sohail86** · 02-09-2010, 02:18 AM

I have some experience (and some luck) cracking simple programs where you load the .exe in a disassembler (ollydbg) and trace through the code and figure out how to disable a time-trial or bypass a authorization key. But how does one do this for a plugin? The particular scenario I had in mind was a photoshop plugin that runs in photoshop.

1) I thought of loading photoshop in Ollydbg but the code size is enormous so I wouldn't know where to set a breakpoint to stop the execution when the plugin is accessed.
2) The plugin is essentially a .dll which I can load in Ollydbg standalone (without loading photoshop), but then I don't have the luxury of actually setting breakpoints and running it as Ollydbg won't let me run the dll properly.

Any help/advice/pointers? If there already is a thread which addresses this, then please point me to it.

Thanks,
Sohail

**Sohail86** · 02-10-2010, 02:59 AM

I just figured out the answer myself, so am posting in case anyone else is facing a similar issue. You just need to run the program in question first, then start ollydbg and attach to the running program. Then when you open a plugin, this plugin will be visible in the 'View->Executable Modules'. From there you can see the entry point, look at familiar strings and start setting breakpoints and single step through the code. It's much more satisfying to have figured this out myself

**wineviruse** · 02-15-2010, 12:59 PM

When you cannot open a program using OllyDbg so first run your program and then attach to it. after you can view executable modules separately and debug each one of them.
www.tuts4you.com is a suit place to search such tutorials.

When you cannot open a program using OllyDbg so first run your program and then attach to it. after you can view executable modules separately and debug each one of them.
www.tuts4you.com is a suit place to search such tutorials.

**msquared** · 03-04-2010, 09:57 PM

Quote:

Originally Posted by Sohail86

I just figured out the answer myself, so am posting in case anyone else is facing a similar issue. You just need to run the program in question first, then start ollydbg and attach to the running program. Then when you open a plugin, this plugin will be visible in the 'View->Executable Modules'. From there you can see the entry point, look at familiar strings and start setting breakpoints and single step through the code. It's much more satisfying to have figured this out myself

Dude I love you soooo much i have been stuck on this very same problem for a little over a month now!! youd think i would have accidentally guess right by now

maybe the problem was trying to hard

anyways thanks for posting the solution to your problem it was very helpfull

**msquared** · 03-05-2010, 10:19 PM

ok so i did attach to my program and then try'd the plugin cant use the program though its just frozen and then i get an error in ollydbg exit code 0

any ideas?

**adikaram** · 03-06-2010, 10:13 PM

thanks

02-09-2010, 02:18 AM
Sohail86 Junior Member Join Date: Feb 2010 Posts: 2 Reputation: 2	Cracking plugins and .dll files I have some experience (and some luck) cracking simple programs where you load the .exe in a disassembler (ollydbg) and trace through the code and figure out how to disable a time-trial or bypass a authorization key. But how does one do this for a plugin? The particular scenario I had in mind was a photoshop plugin that runs in photoshop. 1) I thought of loading photoshop in Ollydbg but the code size is enormous so I wouldn't know where to set a breakpoint to stop the execution when the plugin is accessed. 2) The plugin is essentially a .dll which I can load in Ollydbg standalone (without loading photoshop), but then I don't have the luxury of actually setting breakpoints and running it as Ollydbg won't let me run the dll properly. Any help/advice/pointers? If there already is a thread which addresses this, then please point me to it. Thanks, Sohail
	Vote for Member of the Month

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

CrackingForum.com » Cracking » Cracking Help	Remember: User Name: Password:
- Cracking plugins and .dll files

02-10-2010, 02:59 AM
Sohail86 Junior Member Join Date: Feb 2010 Posts: 2 Reputation: 2	I just figured out the answer myself, so am posting in case anyone else is facing a similar issue. You just need to run the program in question first, then start ollydbg and attach to the running program. Then when you open a plugin, this plugin will be visible in the 'View->Executable Modules'. From there you can see the entry point, look at familiar strings and start setting breakpoints and single step through the code. It's much more satisfying to have figured this out myself
	Vote for Member of the Month

02-15-2010, 12:59 PM
wineviruse Junior Member Join Date: Feb 2010 Location: Teh Posts: 12 Reputation: 1	When you cannot open a program using OllyDbg so first run your program and then attach to it. after you can view executable modules separately and debug each one of them. www.tuts4you.com is a suit place to search such tutorials. When you cannot open a program using OllyDbg so first run your program and then attach to it. after you can view executable modules separately and debug each one of them. www.tuts4you.com is a suit place to search such tutorials.
	Vote for Member of the Month

03-05-2010, 10:19 PM
msquared Junior Member Join Date: Mar 2010 Posts: 2 Reputation: 1	ok so i did attach to my program and then try'd the plugin cant use the program though its just frozen and then i get an error in ollydbg exit code 0 any ideas?
	Vote for Member of the Month

03-06-2010, 10:13 PM
adikaram Bronze Member Join Date: Oct 2009 Posts: 186 Reputation: 3	thanks
	Vote for Member of the Month

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)