Seeds recovering by Olly debugger

[kometata]

Hi,
This is a video tut for the seeds recovering of an 32 bit daemon or EXE (for exe you will need of working demo or c..k license). Thus this is similar to the elegant tutorial that @darsy provided here but I used the Olly because W32dsm crash often under Win7. This is an elementary procedure but for the beginner, like me, it might be helpful because most of the beginners are not familiar with Olly debugger, don't have programming skills and no video tutorials are available for that. I also upload a tut with the seed finder script but it is usually a good idea to know how to make the task manually.

No explanation need just follow the steps from the pdf tutorial.

[Theislander]

I will most definitely try to read this stuff if only I can d/l them...

[kometata]

Hi all,
I will replay to all PM as soon as I can, but please read again my post and especially the part "for the beginner, like me".

[kometata]

Just to point out that this procedure IS NOT the same for Flexlm above 11.9 (i.e. for all current targets), at least with Olly 2.1. If someone share what is the new procedure will be helpful for the other members here....
Have a nice weekend.

[carlitos]

kometata, I have used your video tutorial with a 11.13 target and works fine. I have the confirmation by a "master" that the seed are OK.

[kometata]

Hi,
I am glad that my tutorial has helped you! Hmm, that's strange. I tried on 3 different targets and have problems as described here:
http://www.finetopix.com/showthread....734#post236734
Probably something in my system or ...If am not wrong they are all 11.10. Can you try one of these please:
https://mega.co.nz/#!6gVSWTrC!DJrNAX...-x8Mu1m1vY6OBM
and if you don't mind can you send me your target just to test it?

BR

[carlitos]

sure kometata, I will try with your targets.
Im sending my target by pm

[kometata]

Thanks carlitos!!
I don't know what's happening but under Win7 both 32 and 64bit I can't make my own tutorial for any target above 11.9 Tested on 3 different PC-s and different Olly versions...I am putting the first breaks here:



but then always stuck on after the EB09 (or at least after the nearest EB09) here for any target:



It should break at 55 PUSH EBP, correct? Any ideas?

[carlitos]

kometata I will prepare for you screenshots of all the process, but as I said to you I follow your tutorial. At this moment I cannot understand what is happening in your pc.

[carlitos]

kometata check your pm, I have sent you some screenshots