Flag: Tornado! Hurricane!

 Forums >>  Target Specific - General  >>  Removing Intel C++ Composer XE 2011 removing FNP_Act_Installer

Topic created on: May 1, 2011 05:06 CDT by rootop .

Evening people, this would be my first R.E question here and I sure hope I'll learn tons of good stuff around here!
I'm a novice reverse engineer, but what I lack in knowledge I make up for in the will to learn it. So I don't think I'd have trouble learning this stuff, as soon as I get the time.

Anyway, my first project is to remove the licensing requirement in Intel C++ Composer XE 2011. My school holds a license for this software so this is merely to learn how stuff works.

I can upload the necessary files if it's required, it's just icl.exe and Fnp_Act_Installer.dll.

Anyway around, I've traced down where Warning is issued and the program exits. I found the SUB function that does all the licensing checking and tried to NOP out the CALL. And what do you know, it works! It actually worked!
Now, the problem however is that as soon as I save the modifications, somehow the license check function get's called anyway. When I run the new modified version in Olly it'll get to that function on a different VA than before and ultimately end up in an Access Violation Exception.

So, any ideas what's up? I'll be happy to add some instructions and or images to help explain my issue if asked for.

Oh and also, how do you located module calls? And how would I go about removing a Dll dependency once I've removed any calls?

Nevermind, I solved it eventually. It just didn't include all NOPs when I saved the executable.

But the question remains, how would I go about relocating the code and removing the DLL dependency?

No posts found under this topic.
Note: Registration is required to post to the forums.

There are 31,038 total registered users.


Recently Created Topics
Ultimate Hacking Cha...
Jun/21
CreateMutex
May/31
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Immunity Debugger Re...
Aug/03


Recent Forum Posts
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack


Recent Blog Entries
crystalwade
Jul/20
test

nieo
Mar/22
Android Application Reversing

halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit