You know what, I decided to to give you some of my knowledge since I was (you complete this sentence lol). I will try to keep this simple cause I do not want to complicate you. I was not a symbian cracker since there was no symbian OS back there but cracking is applicable to everything. It is only a peice of code you play with. I must warn you this is not step by step cracking tutorial. What I teach you here is how to start cracking ok???
cracking you reverse engineer the executable file (APP file in this case) and modify it to meet your evil needs. What the heck is reverse engineering you ask??? Reverse engineering is transforming the (APP or
whatever) file to assembly language in order to:
1. Understand it and transform back to HHL (high level language e.g. C++).
2. Just modify it at assembly level (if you are a devoloper, you are probably fixing some bugs but if you are cracker you would be cracking it).
Some of the crackers use a very simple way to crack (fix what ever you call it :) ) the file requires registration, which is nooping method.
what do you mean by NOOPing you ask??? NO OP (NO OPeration), it's an assembly instruction means do nothing. you use that to replace some instruction (in simple words to replace the instruction responsible for handing you to the block of code that tells you: YOU HAVE ENTERED A NASTY REGISTRATION NUMBER after you do lol).
for ex. (I will use a SIMPLE example not in assembly)
compare good_registration_number with input_registration_number
jump to nasty_block_of_code if they are not equal----
display you are great for buying this ugly software,,,,|
.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,|
.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,|
.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,|
exit program,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ,,,,,,,,,,,,,,,,,,,,|
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,|
------------------------------------------------------------------|
|
|--nasty_block_of_code:
display YOU HAVE ENTERED A NASTY REGISTRATION NUMBER
display you are nasty boy do not do it again
(i have used ,,,, as fill-in only so consider it spaces :))
what you do is the following:
compare good_registration_number with input_registration_number
NOOP (nothing remember???)
display you are great for buying this ugly software
.
.
.
exit program
nasty_block_of_code:
display YOU HAVE ENTERED A NASTY REGISTRATION NUMBER
display you are nasty boy do not do it again
So you are great for buying this ugly software always because you will never go nasty_block_of_code.
Im sorry for making this childish lol but actually, in assembly you have to use jmp je mov etc (remember I want this to be simple).
This works for many applications. There other ways too, etc. inversing the jump instructions.
replacing:
jump to nasty_block_of_code if they are not equal
with
jump to nasty_block_of_code if they are equal
If you have done this and there is one of the least luckiest persons in the whole world got the
good_registration_number then he will be a nasty boy ;), you get the picture.
when I say instruction I mean a line of assembly code (in HLL we say statement). Reverse engineering is machine dependant meaning it depends on you machine (more specific, your CPU: Central Processing Unit, the processor ).
For most of machines you disassemble (transform from machine language to assembly language) to Intel set of instructions. That is not the case for symbian APP file since you disassemble to ARM set of instructions. You will find such similarity between them (Intel and ARM) cause assembly in general deal with the hardware.
In order to change the BAD line of code you do not want, you have to have a hex editor (at least in my time). You first disassemble the file and get the address (the nasty addess ;)) you want to fix and you then enter it in the hex editor and do the required change. When you are cracking PC files (your computer not your cell phone) you have to know about protection routines employed in the file. Protection routines are block of code that are used to protect the program from nasty people (the crackers). In cell phone cracking you have less protection routines since devolopers have to consider the memory and storage limitation.
Im going to tell you what is required for you to start cracking:
1. Learn some high level language (i suggest C++) and master the part concerning loops and jumps.
2. After you have done first requirement you need to know how the PC works (CPU and Memory).
3. If you have done two, then you know about the registers (i won't tell you about this cause I want you to know it yourself but I will give you a hint: Register=Variables in HLL).
4. You have to study assembly language (intel set of instructions I suggest).
5. If you reached here then you must know about the jumps and mov instructions and yeah base conversions (to be able to convert between binary, decimal and hexdecimal).
6. Study the ARM set of instructions (if you have done 4 theb this is a peice of cake).
Now I will tell you the programs you will use in cracking:
1. UnmakeSIS (to unpack the sis EPOC Package into files and get the APP file)
2. Makesis (to repack to sis after modifying the APP file).
3. IDA Pro disassembler (to disassembe the APP file of course).
4. Any Hex editor (to do modifications to the APP file).
I heard that the new version of IDA will allow you to change the code so probably you won't need the Hex editor.
I know that these requirements seems way too long but you will find easy if you have some free time. If you love the tech world you would learn faster, believe me. Some people will tell you to skip some of these steps
but believe me you have to go throught those steps.
I do not want this mini-tutorial to get so huge so I have to end it here.
I hope I gave you anything new. Good Luck on your journey :).
Last I would like to say:
1. I did not teach you anything.
2. Im not a cracker.
3. I do even know what PC means, WHERE AM I??? lol
you understand ;)
Peace.
Sticky by Mark_6600
stag2121
11th July 2005, 10:49
Would it be possible if you could provide us the screenshots in order for us to follow the method step by step! Tnx in advance good buddy!!!
marble
11th July 2005, 11:30
Would it be possible if you could provide us the screenshots in order for us to follow the method step by step! Tnx in advance good buddy!!!
he said:
I must warn you this is not step by step cracking tutorial.
smsm
11th July 2005, 11:59
Hey stag2121, thanks for posting brother. I have mentioned that this is not a step by step tutorial. The problem of writing step by step cracking tutorial is that I have to consider that you know about assembly language and machine architectures. So i will start right from how to find the desired instruction to change and how to change it. If I started from this step you won't get nothing. Maybe I will consider writing tutorials series starting from a scratch but I don't have much of time to do this for now. Anyway, read my mini-tutorial, follow the steps and you are going to be just fine. marble thanks for posting too.
Peace.
winwintoto1234
11th July 2005, 14:32
Hi smsm, glad to see you've done what you said.
Initially my idea was to request someone with cracking knowledge to give brief introduction to the members here. Though your posting is not a guide to crack, it provides the members a clearer picture of what is cracking about. (Though you are not a cracker, and I know it, but you surely know that an indept knowledge in computer and programming is required to do this...and no way it can be learnt here, right?)
I've come across a cracking lession but I don't have time to actually study it. That's why I found that your post is good enough to serve the purpose.
I-phone forum needs people like you who is willing to sacrifice some time to contribute. Keep it up man!!!!
Scythe
11th July 2005, 16:05
Now I will tell you the programs you will use in cracking:
1. UnmakeSIS (to unpack the sis EPOC Package into files and get the APP file)
2. Makesis (to repack to sis after modifying the APP file).
3. IDA Pro disassembler (to disassembe the APP file of course).
4. Any Hex editor (to do modifications to the APP file).
I heard that the new version of IDA will allow you to change the code so probably you won't need the Hex editor.
Does anyone know where we might get these on, er, promo? :wink:
UFS-3ā
11th July 2005, 16:15
someone said win32dasm better...
anyone can upload the cracking software here??
Mark
12th July 2005, 00:15
you are making an excelent start on iphone smsm :) a great topic you have here :)
feel free to update it with pics or any necessary corrections.
we have a programing section now where this will be better placed. keep working on this one and it will be anouncement :)
moved from symbian apps.br
smsm
12th July 2005, 02:44
Scythe, makesis and unmakesis are already on the forum. Use the search button above ;). The problem with IDA Pro that its size it is so large so i do not think you will find it easily.
UFS-3ā, you won't be needing w32dasm if you are a symbian cracker cause it do not support ARM. I do not think anybody came with a patch for it cause the one who used to patch it made an announcment that he won't update it no more. About the hex editor you won't be needing this cause the new version of IDA Pro support modifying the APP. A great thing about IDA Pro it supports almost everything.
Thanks Mark_6600 for support :). I will do my best.
Peace
smsm
12th July 2005, 04:57
If you want to learn C++ as I suggested you can read the book attached. The book also has a part concerning base conversions.
Peace.
smsm
12th July 2005, 05:10
If you want study assembly, check the attachment. It is a great starting tutorial. It also has a part concerning computer architecture. The first part of this tutorial is concerned with Registers.
smsm
12th July 2005, 05:18
ARM Instruction Set Cards.
smsm
12th July 2005, 05:21
By reading all of above, you almost covered the requirements. Do not try to read the ARM cards before studying assembly cause you will find it useless.
smsm
12th July 2005, 06:02
For who want the hex editor this is the one you are seeking. This is a great hex editor. Just install the software winhex.zip----setup.exe and then go to patch.zip ----- WinHex.Forensic.Edition.v12.05.SR-11.WinALL-DVT ----- DVT and extract all the files there to winhex directory (c:\program files\winhex by default).
smsm
12th July 2005, 06:11
Makesis and Unmakesis.
smsm
12th July 2005, 06:54
I have found a disassembler for symbian to be placed on cell phone. It did not work for me. Maybe it can work for you. I have packed into sis (it was in folder) for the ease of use.
smsm
13th July 2005, 03:24
It seems that it will do more if I started cracking applications myself not to teach what is cracking all about since everybody think it is hard :) huh??? I did not consider symbian cracking but it seems that I have to think it over.
Peace
UFS-3ā
13th July 2005, 15:52
DataRescue IDA Pro 4.8.0.847
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]
RAR files in 10 parts, must download all the files
Mark
13th July 2005, 18:28
excelent new files added. :) with all this information at least we will be able to learn just what cracking is all about. keep sharing your experiences and knowledge and some day we will form the iphone crack team :D
topic sticky :) br
smsm
14th July 2005, 06:08
Great job UFS-3ā. Now the collection of required programs are all in here.
Peace man.
seventh_plug
14th July 2005, 23:15
ei i found a tutorial.. somewhere.. i'll just post it here. its about
Cracking SymbianWare Stacker v2.02
Cracking [Only registered and activated users can see links] Cellsoft .com - Cellpoker v1.02
if you have questions pls dont ask me.. this tut is NOT created by me.
nuk2nd
15th October 2005, 06:43
an other link for IDA PRO Please!!
I can't use the link that already here..... HELP PLEASE!!!!
or u can explain me how to use the link
Too many link to download thats files.
[Only registered and activated users can see links]
and, too many search engines in your world!
Peace & Love
an0nymous
3rd December 2005, 05:52
how about softice? is it good enough?
nuk2nd
15th December 2005, 12:43
SoftIce is live cracking method.
I feel SoftIce cannot be used to cracking Symbian Applications.
Use w32dasm or IDA Pro and HexEditor, it's better.
eclipsesun
29th December 2005, 19:11
SoftIce, as I've known, is for x86 on PC. And W32DASM is only for x86 CPU instruction. Only IDA Pro support ARM CPU.
Anyone knows which tool is used for debug arm exec file (exe in PPC, smartphone)? (Debug, not disasm). I heard that there's a tool is Armulator, including in RealView CD of ARM, but I can't find anywhere.
Stone-D
31st December 2005, 10:07
What I want to know is how to hook up the seperate .RSC data files to the app file so that they're referenced when the app is disassembled...
Jimmylamz
4th January 2006, 18:08
Decompilers / Disassemblers
DeDe 3.50.02.1619 - Delphi decompiler by DaFixer.
FLAIR tools v4.9 for IDA - Fast library recognition for IDA (1Mb).
InstallShield 6 Tools - Further continuation of fOSSiL's great i5comp (121k).
Interactive Disassembler Pro (IDA) v4.30a - Masterpiece from Datarescue (32Mb's) (since this link seems to disappear or be actively removed, I suggest you make note of the name 'ida430a.rar' for future searches ;-) ).
Interactive Disassembler Pro (IDA) v4.51.770 - A later version of IDA (29.2Mb's).
Interactive Disassembler Pro (IDA) v4.9 SDK - for making your own plugins (6.37Mb's).
isDcc v1.22 - Very capable InstallShield script decompiler by Andrew De Quincy.
palmdeMON - Carpathia's experimental Palm Pilot disassembler, abandoned in 2003 or so.
V-Communications Sourcer 7 - Old but worthy sourcering tool which deserves a place in any reversers archive (986k - 1,010,214 bytes).
V-Communications Sourcer 8 - Latest version (1.62Mb).
Visual Basic v3.0 Decompiler - from DoDi. Disk 1, Disk 2.
W32Dasm v8.93 - Good disassembler for starting out, superseeded by IDA a while back.
hxxp://[Only registered and activated users can see links]
eclipsesun
15th January 2006, 03:38
Decompilers / Disassemblers
DeDe 3.50.02.1619 - Delphi decompiler by DaFixer.
FLAIR tools v4.9 for IDA - Fast library recognition for IDA (1Mb).
InstallShield 6 Tools - Further continuation of fOSSiL's great i5comp (121k).
Interactive Disassembler Pro (IDA) v4.30a - Masterpiece from Datarescue (32Mb's) (since this link seems to disappear or be actively removed, I suggest you make note of the name 'ida430a.rar' for future searches ;-) ).
Interactive Disassembler Pro (IDA) v4.51.770 - A later version of IDA (29.2Mb's).
Interactive Disassembler Pro (IDA) v4.9 SDK - for making your own plugins (6.37Mb's).
isDcc v1.22 - Very capable InstallShield script decompiler by Andrew De Quincy.
palmdeMON - Carpathia's experimental Palm Pilot disassembler, abandoned in 2003 or so.
V-Communications Sourcer 7 - Old but worthy sourcering tool which deserves a place in any reversers archive (986k - 1,010,214 bytes).
V-Communications Sourcer 8 - Latest version (1.62Mb).
Visual Basic v3.0 Decompiler - from DoDi. Disk 1, Disk 2.
W32Dasm v8.93 - Good disassembler for starting out, superseeded by IDA a while back.
hxxp://[Only registered and activated users can see links]
Those tools, only IDA & palmdeMON support cracking for mobile. Others're only for PC based (x86)
N0ki4
15th January 2006, 19:38
Anyone knows which tool is used for debug arm exec file (exe in PPC, smartphone)? (Debug, not disasm). I heard that there's a tool is Armulator, including in RealView CD of ARM, but I can't find anywhere.
You can use the Microsoft Development Tool (EVC).
eclipsesun
30th January 2006, 06:56
On Code Breaker Journal, there is an article about reverse engineering mobile code (target is PocketPC):
hxxp://[Only registered and activated users can see links]
eclipsesun
7th February 2006, 20:08
only for PPC,its that any for smartphone?
Smartphone is the same. It use PE format like in the PPC. The difference is the digital signature on each exec file. You will need to resign app if you patch it.
t0mby
17th May 2006, 21:43
Very interesting article about this topic:
h**p://[Only registered and activated users can see links]
[Only registered and activated users can see links]
Password: [Only registered and activated users can see links]
auato
30th July 2006, 01:55
...and to crack any sw for symbian 9.1, these tools are valid :???:
bigfish74
2nd September 2006, 14:06
It takes alot of your time to study cracking but if you have plenty of time go for it.
lightninglord2000
16th September 2006, 10:33
How about Java MIDP apps/games? Can they be reverse engineered?
khengvantha
18th September 2006, 08:58
How about Java MIDP apps/games? Can they be reverse engineered?
J2ME ? It can be reversed into their source code if they dont encrypt it!
lightninglord2000
18th September 2006, 09:58
J2ME ? It can be reversed into their source code if they dont encrypt it!
So what software do you need to reverse engineer J2ME programs particularly games? Also, does game manufacturers such as Gameloft obfuscate their J2ME code?
khengvantha
27th October 2006, 05:22
Does anyone know how to crack os9 app? Binpda have done!
marquk
19th November 2006, 03:20
Does anyone know how to crack os9 app? Binpda have done!
You crack OS9 apps the same way you crack OS8/7 apps, its all the same to the disasembler.
Leerz
19th November 2006, 13:11
uhhh... why cpp, if you dissasm a file, it shows yo a dead listing of it on asm, which is a "low level lang" anyway, im reading on.
Leerz
19th November 2006, 13:29
how about softice? is it good enough?
uhhh! i dont think you can't use softice with this! you're not actually "executing" the file, you're only reading its deadlisting.
ida and windasm can work together,
its better if the thread started "indicated" some tricks on finding string references with dasm since its easier to cripple apps with that.
in general, regardless of what system, the basics of reversing is just the same.
Leerz
19th November 2006, 13:34
How about Java MIDP apps/games? Can they be reverse engineered?
well if you could translate it from bytecode to highlevel then its posssible,
dissasm the "class" which are compiled java.
the "JAR" is just its capsule (like its storage to keep file together)
khengvantha
29th November 2006, 05:19
You crack OS9 apps the same way you crack OS8/7 apps, its all the same to the disasembler.
Which program that can disassembly them? IDA is not working for OS9.
MikserOK
15th February 2007, 17:59
Which program that can disassembly them? IDA is not working for OS9.
New IDA v5.1 - hXXp://[Only registered and activated users can see links]
"IDA v5.1 adds support for Symbian EPOC v9 files. Both compressed and uncompressed
files can be loaded and analyzed."
khengvantha
22nd February 2007, 06:54
I read it in the morning, but it's available only for their existing customer. :(
madhav
9th April 2007, 20:37
why crackers and hackers dont want to support or reply of our questions they dont want be a helper ???
if they sacares from anyone then y they made cracker or hacker
and if they will help us then will we tell everyone that he is hacker or cracker
whats the problem i dont know but if anybody intrested of this topic then pls give me email id of hacker and crackers so i have some problem in learn cracking so i can discuss it with him or her
so pls support me i m not a cop and i m intrested in cracking only
ijhtio
10th April 2007, 11:53
hahaha madhav if u are a hacker then u can't trust anybody as it might lead you to prison...i think all the hackers and crackers are self made....only script-kiddies need support/help...
anyways search the web and u'll get many things....to start with....let me give you one of the best sites i have ever seen...
[Only registered and activated users can see links]
KhPDA
28th April 2007, 20:47
Now lot of people can crack the software for UIQ3, how can they do this? They use IDA 5.1 ?
weaseley
20th May 2007, 15:56
I am using IDA Advance pro 5... to analyse the app. But I can't find any way to hex edit the app. I tried to use other hex editors but the hex in other hex editor are different from the one viewed by IDA (i have gone to the same address). Anyone can help please?
Thanks in advance.
eclipsesun
20th May 2007, 19:34
I am using IDA Advance pro 5... to analyse the app. But I can't find any way to hex edit the app. I tried to use other hex editors but the hex in other hex editor are different from the one viewed by IDA (i have gone to the same address). Anyone can help please?
Thanks in advance.
Distinguish between file offset with virtual address in program. The hex editors usually use file offset, so you must convert virtual address (VA) in IDA to file offset equivalently.
PS: This is my experience in using IDA with app file of Pocket PC, not other platform.
weaseley
21st May 2007, 08:45
Distinguish between file offset with virtual address in program. The hex editors usually use file offset, so you must convert virtual address (VA) in IDA to file offset equivalently.
PS: This is my experience in using IDA with app file of Pocket PC, not other platform.
Thanks for your reply. But can u clarify how to convert VA to file offset?
eclipsesun
21st May 2007, 09:47
In WinMobile platform, app file uses PE file format. So it's simillar to PE file in Win32 systems on PC. You can use tools in Win32 such as LordPE to open exe file. It has FLC (File Locaton Calculator) to convert VA to file offset, vise versa.
Also, IDA displays file offset next to VA at the status bar.
If you want to know from the root, try to read manual of PE File Format. It could be found in microsoft.com.
weaseley
21st May 2007, 12:32
In WinMobile platform, app file uses PE file format. So it's simillar to PE file in Win32 systems on PC. You can use tools in Win32 such as LordPE to open exe file. It has FLC (File Locaton Calculator) to convert VA to file offset, vise versa.
Also, IDA displays file offset next to VA at the status bar.
If you want to know from the root, try to read manual of PE File Format. It could be found in microsoft.com.
Great thanks for your kindness. I will try to figure it out.
Renz
22nd May 2007, 08:34
Hoping dat our UIQ 3 god WL will share with us a bit of his knowledge.
pranav1989
27th May 2007, 17:07
awesome stuff guyzz !!
plzz can nyone post more tutorials !!
:iphonepost:
Renz
17th June 2007, 09:03
at least share da disassembler 1st pls.... ida pro 5.1
cant find it any where else.demo version cant open sis file
abhi_6680
20th June 2007, 23:55
ya, some one has any link to ida pro 5.1 ?
eclipsesun
21st June 2007, 13:37
Here is IDA Pro 5.0 (incl crk). It's quite good for disasm Pocket PC & Symbian app: [Only registered and activated users can see links]
Chyheang
28th July 2007, 06:52
How about s60v3?How to crack it?
Does anyone give me some tutorals for me?
Thanks in advanced!!!
thetanker
28th July 2007, 09:40
Anyone has any idea where to get new uncracked S60 apps? Share some links and then perhaps we could produce some new tutorials as well...
Thanks...
reazarouz
1st November 2007, 03:00
anyone know how to code bluetooth chip to received data from hp or the other around?
a_ali
3rd January 2008, 15:01
bro you can fine it on seek n destory site, tuts4yousite, and tsrhteam website
ichiban_01
5th March 2008, 06:49
anybody who has knowledge in vb programming??
nee help please...:ashamed:
a_ali
5th March 2008, 08:23
Anyone has any idea where to get new uncracked S60 apps? Share some links and then perhaps we could produce some new tutorials as well...
Thanks...
bro you can find it on its orginal sites, like you can find LCG x-plore, smartmovie etc on Lonelycatgames.com, etc......
best,
Resource Bloge
silomorgy
7th April 2008, 16:03
Thanks for registering me
you are very kink
i want to learn on this nice site
again thank you
PleaseWait
2nd May 2008, 22:10
What kind of web application are this forum using?is it joomla?can i know where to download this kind of application?
PleaseWait
10th May 2008, 23:03
What kind of web application are this forum using?is it joomla?can i know where to download this kind of application?
So sad that this section is not active..even the admin can't answer my simple question
Sittya
16th July 2008, 14:55
dude can anyone tell me how can i run java file
i mean after i write the script in textpad i can run it using textpad
how abt if my pc doesn't have textpad how can i run it
plz help
Tha trashMaster
16th July 2008, 22:23
^^^
from cmd hehe...c:/>java filename (without extension)
Or make your own .bat file hihi
Sittya
17th July 2008, 05:02
dude when i open cmd then type out the name of my java file it say sth abt not recognise as an external or internal command, operable program or batch file
and how to make .bat file huh
Tha trashMaster
17th July 2008, 10:44
read here ;)
[Only registered and activated users can see links]
shobii
27th August 2008, 01:21
thanks smsm :)
useful stuff man
mad11
23rd September 2008, 17:59
taks i hope so i learn more
_DiL_
2nd February 2009, 16:53
Hmmm God One...................
bonomonod
31st March 2009, 22:44
hi guys, would it be better if we have a thread that keeps updated by the poster to discuss or update the tutorial or useful files perhaps? Private message can be sent to the poster if we have any extra comments or useful information...
jaxgamer
18th June 2009, 16:59
how can we edit .jar files
which software is required to read n edit in pc.
pls reply or pm me.
Posted via Mobile Device
fonix232
23rd June 2009, 19:36
jaxgamer, a jar file is a RAR file, with renamed extension... you can open it...
kmanilpillai
2nd July 2009, 12:11
gr8 section for a new beeeeeeeee
jas9cyril
17th July 2009, 14:23
how can i edit the http header of a sis application?
jas9cyril
17th July 2009, 14:28
I think you need a java decompiler to edit the .jar files or a class editor
[Only registered and activated users can see links]
Pleaze
25th August 2009, 04:04
hello
can please someone do a little step by step tutorial about all the tools needed to do own applications and how to install them?
which assembler are good for palm os 5?, where to get them? how to install them?
and what ever is needed to start?