0 1 0 1 0 1 0

0 1 0 1 0 1 0

Reverse Engineering Lab

Reverse Engineering Lab

Tools :  Softice 3.24 - W32Dasm 8.93

from newbie to another

Screen area 1024x768 pixels

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
:004D1885(C)

* Possible StringData Ref from Code Obj ->"WinBoost 98 has been registered successfully."
:004D18AC B86C1D4D00 mov eax, 004D1D6C

scroll up a little bit from here .. you should see some serial numbers .. what's this ?! .. I simply don't care .. scroll up again .. heh this looks familiar for me :

.. enough playing in Win32dasm and fire up SoftICE .. let's have a live concert ! Generally we can always use HMEMCPY in order to break at the target file code. Now goto the registration dialog and use Pirate Copy as Reg Name and 0101010 as Reg Code.

[CTRL]+D
BPX HMEMCPY [ENTER]
X [ENTER]

[OK]  .. *boom* .. press F12 untill we land in wb98 code .. then set breakpoint at 4D11648 .. X [ENTER] .. keep tracing .. snip .. snip .. STOP !!  :

That's it ... take a few minutes to understand this block of codes and draw a flowchart in your mind ... then write it out .. heh damn easy ! ... here i have written one in  C++.  On succesful registration the program will store our license data  in system registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\ShellIconOverlayIdentifiers\Overlays
Ijn="00802322" ; our reg code in little endian ... DWORD 22238000h = 572751872

heh .. nice try don't u think ?! ... hope next time the author will hide it in deeper place !!! ...

WARNINGS ! :
this will be a garbage in your system registry when you uninstall the program and too many garbage will decrease your system performance ! ... do u like when someone put garbage in your home ?  I HATE IT !

I REALLY DON'T GIVE A F%CKIN' CARE WHERE THE SETTINGS/FILES WAS STORED BY ALL AUTHOR'S SOFTWAREZ AS LONG AS THE UNINSTALL WILL REMOVE IT ALL CLEANLY !!! ... ANYWAY NO ONE CAN HIDE ANYTHING IN MY SYSTEM !!! ...

... it should put in here :

HKEY_LOCAL_MACHINE\Software\Magellass\WinBoost98
RegisteredOwner="Pirate Copy"

// Written in Borland C++ 5.2
// Compile with bcc filename.cpp (smaller but slower) or bcc32 filename.cpp (faster but larger)
// huh how do make it faster and smaller !
#include <iostream.h>
#include <stdio.h>
#include <conio.h>
#include <stdlib.h>

void main(void)
{
   char  name[255];
   int   oddeven=0,sw=0,pos=0,x=0,cx,reg[2];
   long  edx,esi;

   clrscr();
   cout << " Keygenerator for Winboost 1.24 bY widYa@cL 2011\n";
   cout << " Copyright (C) wOrLd cRaCkinG linK '99\n\n";
   cout << " User Name         : ";gets(name);cx=strlen(name);

   if (cx == 0) exit(0);
   if (cx > 0x10) cx = 0x10;

   while (pos < cx || sw < 2)
   {
      if (pos >= cx)
      {
         reg[x]=oddeven;
     	  x+=1;sw+=1;oddeven=0;pos=1;
      }
      else
      {
         oddeven=oddeven+name[pos];
   	  pos+=2;
      }
   }

   reg[0]= reg[0]*reg[0];
   edx   = reg[1]*0x22713;
   edx   = reg[0]+edx+0xCDE736;
   esi   = edx;
   esi   = esi << 3;
   esi   = esi-edx;

   cout << " Registration Code : " << esi << endl;
   getch();
}

+Thanks+ 2 aLL my friends ouTThere for the responds though it always follow with 'softwarez links' ...  hopefully  i'll make another tuts (untill 99 tuts .. hurraah !)

GOD IS THE MOST GREAT

Written / Design bY

: widYa-cL 2011

Page CreaTed

: 25 March 1999