Goldwave 4.23

Written by anTiHerO

Introduction

GoldWave is a sound editor, player, recorder, and converter. It can create sound files for CDs, websites, answering machines, or Windows sounds. A full set of effects and editing features are included for professional sound production. High quality audio CDs can be created by using GoldWave in conjunction with CD Recorder software.

Tools required

Debugger (eg Softice or TRW2000) Download from http://playtools.cjb.net
Half a brain

Target's URL

http://www.goldwave.com

Essay

OK, shall we begin? Not being too experienced at reversal, even I was surprised at how easy it was to fish a serial from this program! First thing we need to do is fire up our debugger ( I use TRW, so I start it up, drag the exe file into the window, and hit LOAD!). Up pops your debugger window, so close it, and your target program loads up. Now we need to find our registration input box, and for a change it isn’t in the help menu, its in the options menu. When your registration box pops up, enter the following;

Name: ANTIHERO

Name2: TRES2000

Serial: 1234567890

Note! I know its not cool, but the program will only allow upper-case letters!

Before we press ok, we need to bring up our debugger window and set a breakpoint on the HMEMCPY function ( this causes the program to break everytime something is written to memory ), so in our debugger window we type;

:bpx hmemcpy

Close the debugger window and hit the OK button. BANG! We are kicked straight back into our debugger. Right, a lot of tutorials will guide you to the right area of code by saying “ hit F5 twice, then F12 fifty-two times” etc, but I aint gonna! Its not that I am nasty, it’s just that I never count myself, and I believe you will learn more by trying to find it yourself ( it’s not exactly hard, just more time consuming! ), so I apologise in advance. Back to business. You need to trace through a fair amount of code until you reach the following;

:0046CD44 LEA ECX, [EBP+FFFFFEEA] < Move our “fake” serial into ECX.

:0046CD4A PUSH ECX < Push the contents of ECX onto the stack -------------Type D ECX to see your fake serial.

:0046CD4B LEA EAX, [EBP+FFFFFE9C] < Move Name and Name2 into EAX.

:0046CD51 PUSH EAX < Push the contents of EAX onto the stack ------------ Type D EAX to see Name and Name2.

:0046CD52 CALL 004DA5AC

:0046CD57 ADD ESP, BYTE +08

:0046CD5A LEA EDX , [EBP+FFFFFEB8] < Move Name into EDX.

:0046CD60 PUSH EDX < Push the contents of EDX onto the stack. ------------Type D EDX to see your name.

:0046CD61 CALL 0046CAE0 < Call to routine to calculate real serial.

:0046CD66 POP ECX < ------------------------------------------------------Type D EDX to see REAL SERIAL.

If you typed D ECX a 0046CD66 you should have seen ONBTUWB, write this down!!!!!! Could it be our real serial? Only one way to find out. Clear all breakpoints and close your debugger window, and go back into your registration box, and type the following;

Name: ANTIHERO

Name2: TRES2000

Serial: ONBTUWB

Hit OK, REGISTERED!!!! Job well done. Pat yourself on the back, grab a beer and a cigar and relax in your comfiest chair, safe in the knowledge that you just learnt something worthwhile! C U Soon.

P.S. If you want to unregister the program, your registration details are stored in the Goldwave configuration file located in your windows directory!

Final Notes

My Greetz Goes to:

[T]urb0z – For getting me started on these infernal machines
The TRES2000 Crew

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN

ObDuh

The information in this essay is for educational purpose only!
You are only allow to crack, reverse engineer, modify code and debugg programs that you legaly bought and then for personal use only!!
To ignore this warning is a criminell act and can result in lawful actions!

So please note!
I take no responebility for how you use the information in this essay, i take NO responebility for what might happen to you or your computer!
You use this information on your own risk!!

What i mean is: Please buy the software!

My Greetz Goes to:

When ever there is a door, there is an entrance. And behind an entrance can no secret hide, when a cracker takes his knowledge for a ride McCodEMaN

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN