Live data from Hacker News

Reverse engineering a software crack

twitter.com

1–10 of 95 posts

Re: Reverse engineering a software crack

#4
This was a pretty long read and I didn't really get much from it. The format of a million tweets is awful.

tl;dr it patches the executable by having a shim dll that does the patch when it gets loaded. Pretty common in the game modding community. It finds where it needs to patch by scanning for a byte pattern.

What does the actual patch do? No idea, that's what I was waiting for and I never got it. I was expecting a disassembly comparison of the before and after.

Someone please correct me if I'm wrong.

Re: Reverse engineering a software crack

#6
post #4

This was a pretty long read and I didn't really get much from it. The format of a million tweets is awful. tl;dr it patches the executable by having a shim dll that does the patch when it gets loaded. Pretty common in the game modding community. It finds where it needs to patch by scanning for a byte pattern. What does the actual patch do? No idea, that's what I was waiting for and I never got it. I was expecting a d…

As far as I can tell - and I could be wrong having spent about five minutes reading the thread - the shim DLL basically swaps out a public key used by the applications key verification system for a different one so the keygen can create a valid licence key.

Without affecting any integrity checks in the target binary.

Re: Reverse engineering a software crack

#7
post #4

This was a pretty long read and I didn't really get much from it. The format of a million tweets is awful. tl;dr it patches the executable by having a shim dll that does the patch when it gets loaded. Pretty common in the game modding community. It finds where it needs to patch by scanning for a byte pattern. What does the actual patch do? No idea, that's what I was waiting for and I never got it. I was expecting a d…

As far as I can tell - and I could be wrong having spent about five minutes reading the thread - the shim DLL basically swaps out a public key used by the applications key verification system for a different one so the keygen can create a valid licence key. Without affecting any integrity checks in the target binary.

Ah, that makes sense, thanks! I was pretty confused about the string copy and what that was doing. Normally I'd expect it to be writing a byte array. Now it all makes more sense.

Re: Reverse engineering a software crack

#9
post #5
post #2

https://nitter.poast.org/gf_256/status/1782656618015904103

This says „Tweet not found“ now.

It works fine but does lag sometimes. It’s the only public Nitter instance that is reliably up since nitter.net was shut down or whatever else happened to it.

Your error has happened to me also but it does eventually work.

Post reply on HN