Skip to main content

Learn to Crack any version of WinRAR – An Introduction to cracking

Hi folks,its been a long time since I have posted some thing technical,so I will be writing about the challenge I got at NITLearn to Crack any version of WinRAR – An Introduction to cracking KU, where I cracked WinRAR 3.80 using a disassembler and will tell you the same here. You can crack any version of WinRAR using this method and need not to pay for the registration fee and you can do this all by your self,easily. Furthermore, major software are cracked using the same way,but just get a bit complex in the methodology. This tutorial is intended for those who are new to cracking and disassembling.


Disclaimer – By Reading this tutorial You agree that this tutorial is intended for educational purposes only and the author can not be held liable for any kind of damages done whatsoever to your machine, or damages caused by some other,creative application of this tutorial.
In any case you disagree with the above statement,stop here.
The Tools
To perform this hack you will be needing -
  1. Any De-assembler (I use Hackers Disassembler and Hview )
  2. Resource Hacker
  3. A patch Creator ( Use Universal Patch Creator or Code fusion)
You will be able to get them by googling ..

How to Crack ?
You need to have a bit knowledge of assembly language,and in case you don't have it,just cram the steps and it will work anytime,every time. Download the latest version of WinRAR from their website and install it.
I will be cracking Winrar 3.80 here (cuz I already have it:P ). This is basically a 2 step process ( 4 step ,if you want to do things with a professional touch,period) .
Install WinRAR - www.theprohack.com
Now copy the WinRAR.exe file to desktop. Make a copy of it there.

Step 1 – Hunting for Memory Address
Now load Hackers Disasembler and load the copy in it.

Open Hackers Disassembler and load copy of Winrar in it - www.theprohack.com

The Disassembler will disassemble the executable in assembly code. Now you need to search for strings that are used in WinRAR program. Press Ctrl + F and type “evaluation” without quotes and search in the assembly code. Hit enter..

Reach this block of code using search function - www.theprohack.com

After you have reached this block of code by searching, just look at the block of code above it. There you will find that some assembly values are being compared and then code is jumped to some other function. Now see carefully, the “evaluation copy” function must be invoked after some specific condition is met. We need to look for it at the code and the make certain changes to the condition so that the program doesn't checks for the condition.

We need to edit this code,but first note memory address - www.theprohack.comWe need to edit this code,but first note memory address - www.theprohack.com
In the above code you can see this code -
00444B6A: 803DF4B84B0000 cmp byte ptr [004BB8F4], 00
00444B71: 0F859B000000 JNE 00444C12
This is the code responsible for validating you as a legal user :) . Just note down the memory address that leads to jump (JNE) at some memory location. In this case, note down 00444B71 .
Note : For any WinRAR version, this code and memory address might be different,but the JNE will be same. Just note down the respective memory address that checks.
Now you need to search for the code that brings that ugly nag screen “Please purchase WinRAR license” after your trial period of 40 days is over. For this,look over your toolbar and click on “D” which stands for looking for Dialog references.
Hit the D in toolbar - www.theprohack.com

Now in the dialog box that opens,search for “please” and you will get the reference as -
ID-REMINDER, “Please purchase WinRAR license”
Search in dialog references - www.theprohack.com

Double click on it and you will reach the subsequent code.

Note down the location of REMINDER dialog code - www.theprohack.com
The code will be something like
* String: “REMINDER”
0048731A: 68EB5E4B00 push 004B5EEB
Just note the memory address that invokes the REMINDER dialog. In this case its 0048731A. Note it down.
Note : For any WinRAR version, this code and memory address might be different.But the Reminder Memory address code will always PUSH something. Just note down the respective memory address that PUSH ‘s.


Step 2 – Fixing and Patching
Now in this step we will be patching up values of memory addresses we noted earlier. I will be doing this using HVIEW.
Now load the copy you disassembled in Hacker’s Disassembler in Hview.

Open HVIEW and open the EXE in it - www.theprohack.com

After you have loaded it, you will see the code is unreadable. Its just like opening an EXE file in notepad. You need to decode it. To do that, just press F4 and yoiu will get an option to decode it. Hit DECODE and you will be able to see code in the form of assembly code and memory addresses.

Decode the code by pressing F4- www.theprohack.com

After you have done that, you need to search for memory addresses you noted down earlier. Just hit F5 and a search box will be there. Now you need to enter the memory address. To do that, enter a “.” and the type memory address neglecting the earlier “00” . The “.” will suffice for “00”. ie -
Type .444B71 in place of 00444B71
search using F5 - www.theprohack.com

and search in the code.

reach the code - www.theprohack.com

After you have reached the respective code, you need to make changes to it. Press F3 and you will be able to edit the code.Now make the following changes -

Change the values- www.theprohack.com

After you have done it, save it by pressing F9.
Now search for next memory location by pressing F5 and entering it. Reach there and make the following changes by pressing F3 -

Offset patching - www.theprohack.com

Save the changes by pressing F9 and exit HVIEW by pressing F10.
Congrats..You have cracked WinRAR :) Replace the original WinRAR.exe with this copyofwinrar.exe by renaming it. It will work 100% fine :P

Step 3 – Spicing up the EXE
Now U have a 100% working version of EXE, you might want to change your registration information in WinRAR. TO do this, you can use Resource hacker.

We need to change registration info - www.theprohack.com

Launch Resource Hacker, load the copyofwinrar.exe in it

Use resource hacker and open the file - www.theprohack.com

Now go to DIALOG –> Expand tree –> ABOUTRARDLG and click it. Now Find Trial copy line and replace it with your favorite one :P

make changes and compile them - www.theprohack.com

and click on Compile Script button.

yup..thats the final result - www.theprohack.com

Now save the file with any name on your desktop or any location what so ever.

save your exe - www.theprohack.com

Now you have a fully patched WinRAR.exe file :)) you can either use it, or also can distribute it like a real cracker. If you want to learn that, move on to next step.

Step 4 – Creating a working Patch (or giving Professional touch :P )
I will be using diablo2oo2's Universal Patcher (UPE) for creating the patch. The patch will work like any authentic one for that WinRAR version. Just like the one U downloaded at anytime of your life from any Crack and Keygen website.
Launch Patch Creator and click on add new project. Enter project Information and click on save.

Launch the patcher and setup it - www.theprohack.com

Click on Add – ; Offset patch


Create Offset patch - www.theprohack.com

After you have done that, double click on offset patch and then
  1. Give path of original winrar.exe
  2. Give path of unmodified Winrar.exe (again)
  3. Give path for fully patched Winrar.exe (ie Cracked Winrar.exe in this case)
  4. Click on compare and it will show difference between both files
  5. Click on save.
Compare executables - www.theprohack.com
Now in the next window, click on Create Patch and save it. The Patch will be created. Now copy it in WinRAR installation directory and hit on patch, it WILL work.

Create your patch - www.theprohack.com

Congrats you have created a patch of your own and have learned to crack WinRAR :)

Run the patch and it will work :) - www.theprohack.com

You can crack other software in the same way…just practice,debug and disassemble and you will get the way :)
PS: The above is the long way to do it, I will be telling you the shortest way to crack WinRAR in just 1 step, the main aim of this tutorial was to introduce you to disassemblers and tools, and do some dirty work with your hand.
Cheers

Popular posts from this blog

Send Free Sms To Mobile From Your PC

Here is the list ENJOY h ttps://zyb.com/ http://www.mobyko.com/ http://stepsms.com/ http://www.smstxtbox.com/web/ http://www.junglesms.com/ http://50sms.com/ http://www.ecosms.ch/ http://www.free–sms.com/index.go http://www.pimpmysms.com/ http://www.islamweb.net/ http://www.phones.com/ http://www.devinosms.com/ http://gsms.se/ http://www.themobiweb.com/en/sms.html http://my.phonegnome.com/ http://sms4u.biz/signup.php http://simsor.com/register http://www.mobik.com/mobik/client/ http://www.smsdiscount.com/en/index.html http://4usms.net/ http://www.sendsmsnow.com/ http://www.unisms.uni.cc/ http://www.atrochatro.com/ http://www.gsmvault.com/ http://smscity.com/ http://www.sms2india.org/ http://www.freesms.web.tr.tc/ http://www.d1g.com/ http://thesmszone.com/ http://zyb.com/ http://www.vazu.com/ http://www.sms.ac/ http://www.agentsms.com/ http://www.mobizone.com/ http://www.yellowpages.com.eg/ http://www.boswtol.com/ www.masrawy.com/sms http://www.resalh.com/ http://free-sms-message.com/in...

Aston Windows Shell 2.0.3 (+ 61 windows skin + crack)

Gladiators Software announces the release of Aston version 2.x. This surprisingly smart, considered, at once sophisticated and simple shell replaces the standard Windows desktop and makes it more usable, beautiful and customizable. Many Windows users find standard shell too rigid and inflexible. Aston offers the completely unique approach with yet unseen features and themes with live wallpaper. The basic feature that makes it so unique is that Aston is fully skinnable and customizable. You can freely choose from many themes and pick the one that suits you the most. If you want to give your designing skills a try you can even make your own theme. The advanced skinning engine is very intuitive and your imagination is the only limit. Every element of the theme: menu, desktop, panels - can be tweaked and customized, thus letting one create the most convenient working area. Widgets push the limits of usability and customization even further. You want to know the weather forecast, your syste...

Portable Microsoft Office 2007 Word & Excel Only

Microsoft Office Excel 2007 is a powerful tool you can use to create and format spreadsheets, and analyze and share information to make more informed decisions. With the Microsoft Office Fluent user interface, rich data visualization, and PivotTable views, professional-looking charts are easier to create and use. Office Excel 2007, combined with Excel Services, a new technology that will ship with Microsoft Office SharePoint Server 2007, provides significant improvements for sharing data with greater security. You can share sensitive business information more broadly with enhanced security with your coworkers, customers, and business partners. By sharing a spreadsheet using Office Excel 2007 and Excel Services, you can navigate, sort, filter, input parameters, and interact with PivotTable views directly on the Web browser. Go here for more info: Code: http://office.microsoft.com/en-us/excel/default.aspx Readme: Code: Portable Microsoft Office 2007 (Word & Excel Only)...