Hello,

I'm new to cracking/debugging, and i've been trying to debug/crack a PLUGIN that runs inside GoogleSketchUp. I'm using IDA PRO 6.1, without success.

The main plugin .DLL file is loaded at GoogleSketchUp startup.

The only things i'm able to do till now is attach Windbg Debugger to running instance of GoogleSketchUp or run GoogleSketchUp from IDA Debugger (Debugger -> Run -> Windbg Debugger), set breakpoint (Stop on library load/unload) and see the loading of the .DLL files.
Example:
Output window: "A080000: loaded C:\Program Files (x86)\Google\Google SketchUp 8\Plugins\xxxxxx\xxxxxxx.dll"
Debug window: "ntdll:774EFC52 add esp, 4"

that's all. But i need to debug the DLL, not SketchUp content.

Can someone give me directions on how to do it ?

Thank's

| Сообщение посчитали полезным:

So, do you want to debug or to crack? Two different things, I guess.
An expression "to crack a dll" does not make much sense to me...
Could you be more specific?
To look at a DLL's internals you can start with PE explorer or dumpbin utility. They will show the list of exported functions, disassembled code and many other interesting things.

-----
Give me a HANDLE and I will move the Earth.

| Сообщение посчитали полезным: brunobh

Open the program in a OllyDbg > Enter a command: bp LoadLibraryA/LoadLibraryW and press F9
After loading the library can put a breakpoint on the section .text in a dll library.

Of course, if I understand you correctly)

| Сообщение посчитали полезным: brunobh

I want to crack/patch the DLL plugin to bypass it's license. So i need to debug and compare execution in licensed and unlicensed versions. It worked with OllyDbg and setting a breakpoint as explained by MasterSoft.

Thanks !

| Сообщение посчитали полезным:

It worked fine with GoogleSketchUp, but this is not working for SolidWorks.

It seems that SolidWorks has some kind of detection/protection mechanism against OllyDbg.

I skipped the errors setting EPI to next instruction manually (new origin).

Do you know how to bypass this ?

Thank you



| Сообщение посчитали полезным:

In OllyDbg click a ALT+O


| Сообщение посчитали полезным: brunobh

Thank you MasterSoft. Worked perfectly !



| Сообщение посчитали полезным: