[REQEST] hex tutorial

Discussion in 'Mixed Languages' started by solarstone2149, Nov 29, 2011.

  1. solarstone2149

    solarstone2149 MDL Member

    Dec 11, 2009
    165
    36
    10
    #1 solarstone2149, Nov 29, 2011
    Last edited: Nov 29, 2011
    this post might be "touchy", since I don't really ask for programming help
    but rather hex/patching help

    and before possible flaming begins :p
    I asked a staff member where to post the question and answer was here.

    my question goes, I would really like to know what sections of slc.dll to hex-change
    (on which parts) - for lets say Vista Betas or 7 Betas,not RTM of any Windows OS ! - so just betas
    so they become activated/removed the evaluation period

    I understand this wouldn't be "3 click job", hence why I ask if anyone here has a solid tutorial or knows specific procedures
    as in, which dll calls to change and to what value

    I ask this here because no search engine spits this info
    and truth... MDL is full of knowledgeable people doing this kind of stuff :D
     
  2. woot332

    woot332 MDL Senior Member

    Feb 18, 2011
    390
    815
    10
    #2 woot332, Nov 29, 2011
    Hmm i dont think you will learn anything by simply patching the
    nessecary M$ license dll file(s). You should try to RE it yourself
    use a debugger and put breakpoints in right places then you
    will now where to patch:D
     
  3. solarstone2149

    solarstone2149 MDL Member

    Dec 11, 2009
    165
    36
    10
    #3 solarstone2149, Nov 30, 2011
    Last edited: Nov 30, 2011
    (OP)
    well yes
    that is the thing I'd like to see tutorial/help on

    I know I can't blindly just pick any address in file to change
    but there must be specific function calls (names) and specific value for them to be changed
     
  4. woot332

    woot332 MDL Senior Member

    Feb 18, 2011
    390
    815
    10
    #4 woot332, Nov 30, 2011
    If you have experience with programming any level and you want to learn RE
    i might point you in the right direction, but if are not a developer and have
    no intention of learn programming then there is no point in RE.:D
     
  5. solarstone2149

    solarstone2149 MDL Member

    Dec 11, 2009
    165
    36
    10
    #5 solarstone2149, Dec 1, 2011 (OP)
    well I'm no programming guy
    but I do know to meddle with DependancyWalker+Hex editor+WinDasm
     
  6. woot332

    woot332 MDL Senior Member

    Feb 18, 2011
    390
    815
    10
    #6 woot332, Dec 1, 2011
    Anyways if want try use ollydbg or any other debugger and put breakpoints at right api(s):D
     
  7. solarstone2149

    solarstone2149 MDL Member

    Dec 11, 2009
    165
    36
    10
    #7 solarstone2149, Dec 1, 2011 (OP)
    yeah but at which ?
    do they have common name or simmiliar ?

    in one post on X forum i found someone was mentioning

    SLGetWindowsInformationDWORD()
    SLGetPolicyInformationDWORD()

    IsActivated
    IsAeroThemeAllow
    GetWindowsInformation