Web Image Maker 0.9.0.1817

Written by anTiHerO

Introduction

Web Image Maker is a powerful HTML & Thumbnails generator:

· A powerful and fast Thumbnails generator :

o Support more than 40 picture format

o Customizable JPEG Output

o Recursive generation

o Lot's of others options

· A powerful and fast HTML generator :

o The generated pages link the thumbnails to the original pictures.

o Lot's of others options

And more cool stuff, like :

· Multilanguage architecture. (You want to work with Web Image Maker in your language? It's possible!, just copy one of the provided language file, and translate it, and the soft can now be displayed in this new language.) If you create a new language, send it to me i'll include it in the next release.

· More than 40 picture format are supported, with of curse the most used. (bmp, gif, jpg, png, tga, tif, ...)

· Online help. (Don't need any help file, the soft help you at any time)

· Much more, just try it... :)

Limitations of the trial version:

· You have to recreate all the picture every time

· You can generate file from only one path

· You can only create a unique html page

· You can't customize the HTML pages generated

· Thumbnails are generated only for jpg files

· Your preferences aren't saved

Tools required

Debugger (eg Softice or TRW2000)
Half a brain

Target's URL

http://www.micronline.com/software/WIM/GB/index.htm

Essay

OK, shall we begin?

Fire up the target program, and go to the About option located in the Help menu. This will open the About information box with registration input boxes located at the bottom. In these boxes, I entered;

Name: antihero

Serial1: 1212121212

Serial2: 3434343434 ( in the registration box it will look like: 1212121212 3434343434 . Get It? )

As you will see in the registration box, the serial number is split into two parts, effectively making it two serial numbers! This is why I have listed two above. Lets carry on!

Now we need to set a breakpoint on the target before we click the registration button, and we will be using the HMEMCPY function ( this will break the program every time it writes something into memory ) so we bring up our debugger window and type;

:bpx hmemcpy

Close your debugger window, and hit the registration button. Bang! Up pops our debugger window ( this means that our breakpoint has stopped the program dead in its tracks after it has written to memory ) but we are not at the place we need to be! Tracing through, you will find that you have to go through the USER32 and KERNEL32 portions of code before you hit the code we are interested in. Because we had three input boxes in our registration box, we need to trace though to the third instance of our program code. Once in it, you will eventually reach the following section of code;

:004DBF17 CALL 434A10

:004DBF1C MOV EAX, [EBP –0C] < Move name into EAX register

:004DBF1F POP EDX < Move 1^st part of “fake” serial into EDX ---------------- Type D EAX to see your name

:004DBF20 POP ECX < Move 2^nd part of “fake” serial into ECX ---------------- Type D EDX to see serial 1

:004DBF20 CALL 004DB30C < Calculate “real” serial. We need to trace into here ------ Type D ECX to see serial 2

Because we need to step inside the call at 4DBF20, we should press F8 to take us there. Once we have done this, and traced through the code a bit, we will see the following code;

:004DB353 MOV EAX, EBX

:004DB355 CALL 004DB3A8 < Generates REAL serials

:004DB35A MOV EAX, [EBP –0C] < Move 1^st part of real serial into EAX

:004DB35D MOV EDX, [EBP –04] < Move 1^st part of fake serial into EDX ------------------------------------------ Type D EAX to see 1st part of real serial ( write down!)

:004DB360 CALL 00404020 < Compare 1^st part of real serial against 1^st part of fake serial --------------------- Type D EDX to see 1st part of our fake serial

:004DB365 JNZ 004DB378 < If not equal, jump to “Bad Cracker” message. If equal, carry on

:004DB367 MOV EAX, [EBP –10] < Move 2^nd part of real serial into EAX

:004DB36A MOV EDX, [EBP –08] < Move 2^nd part of fake serial into EDX ------------------------------------------ Type D EAX to see 2^nd part of real serial ( write down!)

:004DB36D CALL 00404020 < Compare 2^nd part of real serial against 2^nd part of fake serial -------------------- Type D EDX to see 2^nd part of our fake serial

:004DB372 JNZ 004DB378 < If not equal, jump to “Bad Cracker” message. If equal, carry on to “Good Boy!”

OK! Looks like we have the information needed to get this sucker registered! Clear all breakpoints in your debugger and close the window. When we are back into the registration section, lets try out or fished serials!!!!! So enter the following;

Name: antihero

Serial1: ADF539156DE33A64

Serial2: 311919BEC78F75FE

Hit OK, REGISTERED!!!! Job well done. Pat yourself on the back, grab a beer and a cigar and relax in your comfiest chair, safe in the knowledge that you just learnt something worthwhile! C U Soon.

Final Notes

My Greetz Goes to:

[T]urb0z --- 4 getting me started on these infernal machines!
The TRES2000 Crew – 4 giving me a chance!
My mum

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN

ObDuh

The information in this essay is for educational purpose only!
You are only allow to crack, reverse engineer, modify code and debugg programs that you legaly bought and then for personal use only!!
To ignore this warning is a criminell act and can result in lawful actions!

So please note!
I take no responebility for how you use the information in this essay, i take NO responebility for what might happen to you or your computer!
You use this information on your own risk!!

What i mean is: Please buy the software!

Essay written by anTiHerO ©TRES2000. All Rights Reserved.