PhotoExplorer v1.0.6
Microsoft Visual C

Written by anTiHerO

Introduction

Protection: Registration and 30 day Time Limit

About: PhotoExplorer is the most comprehensive and affordable image management software available today. The current release runs on Windows 95, 98 and Windows NT, utilizing the full 32-bit power for dazzling speed. PhotoExplorer's advanced design takes advantage of the multitasking, multithreading, and memory management capabilities of today's computer systems for optimized performance. The comprehensive features will eliminate your needs to buy multiple imaging software.

Tools required

Debugger (Softice or TRW2000)

Half a brain

Target's URL

http://www.photosoft.com

Essay

OK, shall we begin? Fire up our target program, and you will be greeted with a nag screen giving you three options. We want to get this sucker registered, so click on the purchase button. We now see three empty dialogue boxes, so I entered the following;

Key: 1212121212

Name: anTiHerO

Company: TRES2000

Before we click on the OK button, we need to set up a breakpoint in our debugger. So, bring up your debugger window ( Ctrl+D for SoftICE, Ctrl+M for TRW2000) and set a breakpoint on the HMEMCPY function by typing;

:bpx hmemcpy

OK, now we need to close the debugger window, and click the OK button. Wham! We are back in softice, but we are not at the section of code we are interested in, so press F12 until we are in the program code. There are 3 dialogue boxes in the registration box, so keep pressing F12 until you are at the third instance of our targets code, then trace through using F10 until you reach the following section of code;

:00623FB3 CALL EBX

:00623FB5 LEA EAX, [EBP-28]

:00623FB8 PUSH EBX

:00623FB9 CALL 00621D08

:00623FBE ADD ESP, BYTE +04

:00623FC1 LEA EAX, [EBP –14] ß Move “fake” serial into EAX

:00623FC4 LEA ECX, [EBP –28] ß Move “real” serial into ECX ------------------------- Type D EAX to display fake serial

:00623FC7 PUSH EAX ß----------------------------------------------------------------- Type D ECX to display real serial

:00623FC8 PUSH ECX

Did you type D ECX to display the real serial? If so, our job is done. Clear all breakpoints, and close your debugger. Back in the registration part of our program, we need to enter our new found serial, which was found to be;

Key: 0105472377623109

Name: anTiHerO

Company: TRES2000

Right, the moment of truth. Click OK, and hope for the best…..REGISTERED!! Job done.

Final Notes

Pat yourself on the back, grab a beer and a cigar, and relax, safe in the knowledge that you just learnt something usefull!!

My Greetz Goes to:

[T]urb0z – For introducing me to these infernal machines

The TRES2000 Crew
My mum

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN

ObDuh

The information in this essay is for educational purpose only!
You are only allow to crack, reverse engineer, modify code and debug programs that you legaly bought and then for personal use only!!
To ignore this warning is a criminal act and can result in lawful actions!

So please note!
I take no responsibility for how you use the information in this essay, i take NO responsibility for what might happen to you or your computer!
You use this information on your own risk!!

What I mean is: Please buy the software!

My Greetz Goes to:

When ever there is a door, there is an entrance. And behind an entrance can no secret hide, when a cracker takes his knowledge for a ride McCodEMaN

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN