0 1 0 1 0 1 0 |
0 1 0 1 0 1 0 |
... Time Limits ... |
| Reversing Engineering Lab | Name : cpuidle.exe - Type : System Utility Size : 570,884 bytes | Reversing Engineering Lab |
| ... from newbie to another ... | Tools Used : Regmon v4.12 - Regedit |
... from newbie to another ... |
| Cpuidle 5.03 |
| Author | : Andreas Goetz |
| : cpuidle@gmx.net |
| Homepage | : cpuidle.home.pages.de |
Intro |
| Hi guys ... you are now reading my 5th tutorial ..... this is the shortest tute i've ever wrote ... bla ... bla ... bla ... |
| Overview |
CpuIdle runs a HLT command in an idle priority thread under Win95/98. That allows modern microprocessors to save power and stay cool. Great for overclocking. CpuIdle's is also the best and most complete CPU optimizer for Win95/98 that exists. Most CPUs include performance increasing options that are disabled by default. CpuIdle activates them all! Yeah ... a great tool for my overclocked cpu ... |
| The essay |
| ... i had play around with
this program for a few minutes ... and i see no registration screen here ... but no
functions are disabled .. no nag screens as well ... definetely no limitations here
except 30 days trial period ... looks like a deadware for me ... no matter how we crack it
we can't make it into the registered version cause it only contains the code for the first
episode. So our target now is to remove this date expiration. Before we go any further we need to know which registry keys are read/create and which files are read when we run the target. Let's checked registry first. Run regmon and put "cpuidle" in process include, "explorer;regmon" in process exclude ... now run cpuidle ... #bOOm# ... there's nothing interesting for me except these lines : Cpuidle OpenKey
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StatMan\Config
SUCCESS hKey: 0xC59A7DD0 .. why ?! .. 'coz it create/read a key in a 'wrong' place ... Andreas hide it in Bill Gates teritory ( i don't like thiz !) ... look at value data for drv & vxd ... heh ... looks interesting for me ( my trial period is still 30 days left) ... now i wonder what the value will be if i have 29 days left .. heh .. the Drv value change into 3D ... hmm ... 30 -> 3(1)E ?? ... 29 -> 3(1)D ?? ... is it that simple ?! ... what the value will be if we want 60 days left ... is it 4E ? ... yeah just what i expected ... 120 days -> 5e ! ..... that's enough for me ... let's change the value to "FE" and we'll have 122880 days (122880/360= 341 years !!! ...) left for evaluation ... or you can just delete the StatMan key to get your 30 trial period back ... .. heh .. amazing ?! ... this is the first time i crack without using Sice & W32dasm ...!! |
| Final notes |
... any
comment/suggestions/critics ?! ... juSt leT me knOw ! |
| Greetz : |
| SandMan,CrackZ,tKC/All PC
members, tHATDUDE, UCF, Torn@do, The Immortal Descendants, +ORC, MiB , Iczelion, GCG,
ED!SON, Razzia, +Xoanon, iCECREAM, FraVia, Lord Caligo, Buckaroo Banzai, +gthorne ,
Mexelite , Corn2, Vizion, Manson69, nIabI, Cyborg, ^pain^, intruder, Yaan, Laxity, JoGy,
nIabI [C4N/ME], MR NICK, NaTzGUL [REVOLT], Qapla', The _RudeBoy_ , BigMoM, Aphex Twin
[Vandals], v√lt√_δ, eXact, YOSHi, Volatility, ZeroDay, Aescu, _CbD_, Gavin Estey, DR.
Encryption, Joshua Auerbach, Klee8084, masta_, Chuck Nelson, _HaK_, Nemrod and ReN, R.
DeYoung, Hugo Perez, lownoise, Hayras, YOU ..... |
| Special Thanks : |
| Andreas Goetz ... u had reminds me to clean garbages from my registry !!! |
| Written / Design bY | : widYa-cL 2011 |
| Page Created | : 05 March 1999 |