Jump to content

Oceans Winlicense v3.1.2


whoknows
Go to solution Solved by BlackHat,

Recommended Posts

  • Solution

It was a pretty easy Target If You know how to play with @SDK calls or how to change the code in fly/patch in memory.

  • Dump the exe as It is Winlicense over C#/.NET, So Memory Dump will work fine. I did not see any Anti-dump so I performed a regular Dump only. 
  • As You can see, It loads "WinlicenseSDK.dll" which can not be dumped via C# Memory Dumping so You can save it when this @DLL is called.
  • As I saw that it loads "kickogg.dll" which is a small Game (if the License is valid) so I changed the configuration to make it Successfully Registered.
Quote

but the Problem was - Dumped file do not have this "kickogg.dll" file anywhere so I must have to dump it from original exe by altering the code. 

So, How ? -

  • You can intercept the calls of License SDK and make it valid to dump the main DLL or
  • You can perform some other tech. to dump the embed file even when they are not called anywhere. So If you do this, You do not have to modify the License calls for Success but can directly dump. 


I use the 2nd way to dump it. 

Here, We go.

1.jpg.40bd35391b6e0e627268dda8bbda8d09.jpg

Code of Game File - 

2.jpg.eb0d5b8be520b1c939a4613c253a8c00.jpg

 

  • This is the File of Game - "kickogg.dll"
  • Executable used to Load it - "WindowsFormsApplication1.exe"

 

All Files - 

Oceans_unpacked.rar

Edited by BlackHat
  • Like 4
  • Thanks 1
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...