WinNC 2000 Professional
Delphi Reversal

Written by anTiHerO

Introduction

Protection: Registration

About: File management is always a big issue when it comes to using today's operating systems. Most people nowadays use good old Windows Explorer for routine file management. They cut, copy, and paste day in and day out, scrolling from one folder or drive to another the best that they can.

Maybe you miss the old days of File Manager where you could see dual views of your directories or drives. Or even better, what about Norton Commander, the old DOS trusty file management tool that could do it all with shortcut keys.

Well, the folks at Dunes Multimedia, a small company based in the Netherlands, specializing in multimedia production, Internet design and software development, have whisked us back to the 80s with their great product called WinNc 2000 Professional (WinNc).

WinNc is a throwback to the good old days with a product that resembles and works just like its old lookalike but with added functionality and full windows flexibility.

When you first open WinNc it feels like you are riding in a new Porsche, mainly because it loads fast and gives you full control of all of your files, directories and drives. Copying a file or moving directories is so much easier when you can view the process, and using the old F5 or F6 hot key to copy or move files is so much simpler than copy and paste.

WinNc is loaded with all types of goodies, you can do just about any type of file maintenance you want, from file copy, splitting and deletion, to editing and viewing documents, audio, video and pictures.

WinNc allows you to handle compressed files as if they were directories and supports all regular compression standards. Just press enter to open a zip file and select the files you want to compress or uncompress. Then use the old F5 or F6 hot keys to copy or move files in to the other panel containing your target directory. For the web WinNc allows you to upload your homepage files to a http/ftp server using the built in FTP function.

WinNc is so comfortable that replacing Windows Explorer with WinNc was just as natural as getting into a car and driving away.

Tools required

Debugger (Softice or TRW2000)

Half a brain

Target's URL

http://www.dunesmm.nl/winnce/

Essay

OK, shall we begin? Upon starting our target program we are greeted by a nag screen telling us that we are using a shareware version, and to register to get the full version.If we click OK we are sent straight into the program, so we need to click on the Register button. Looks familiar! We are greeted by 3 empty dialogue boxes, and I filled them in as follows;

Name: anTiHerO

Company: TRES2000

Serial: 1212121212

Before we click on the OK button, we need to set a breakpoint using our debugger. So open up the debugger and set a breakpoint on HMEMCPY by typing;

:bpx hmemcpy

Close your debugger window, and click on the OK button in our registration box. Bang! Straight back into our debugger! We are not at the point of the code we need to be at, so trace through to the FOURTH instance of our program code, and you should eventually see the following;

:00516D9E CALL 00415F58

:00516DA3 MOV EDX, 80000001

:00516DA8 MOV EAX, ESI

:00516DAA CALL 00446708

:00516DAF MOV EDX, [EBP – 0C] < Move “ fake “ serial into EDX

:00516DB2 MOV EAX, [EBP – 04] < Move name into EAX -------------------------------------- Type D EDX to see fake serial

:00516DB5 CALL 00516990 < Call to real serial generation routine -------------- Type D EAX to see name

:00516DBA MOV EBX, EAX < Move EAX into EBX ---------------------------------------- Type D EDX to see real serial

:00516DBC TEST BL, BL < Does BL = 0 ?

:00516DBE JZ 00516E20 < If YES, jump to “ Bad Cracker “, if no, carry on to “ Good Boy “.

If we type D EDX when the MOV at 00516DBA0 is highlighted, you need to scroll down through the data a few lines (Ctrl+Down arrow for TRW2000) before you see the real serial number! Right, looks like we have enough information to get this baby registered. Clear all breakpoints in the debugger, and close it. Up pops our invalid serial number box, so get rid of it, get back to our registration box, and we type the following into the three dialogue boxes;

Name: anTiHerO

Company: TRES2000

Serial: 8388-4811-5163

The moment of truth! Click OK, REGISTERED!!! He shoots, he scores. You are now the owner of the full version of WinNC 2000 Pro.

Final Notes

Pat yourself on the back, grab a beer and a cigar, and relax, safe in the knowledge that you just learnt something usefull!!

My Greetz Goes to:

[T]urb0z – For introducing me to these infernal machines

The TRES2000 Crew
My mum

When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride
McCodEMaN

ObDuh

The information in this essay is for educational purpose only!
You are only allow to crack, reverse engineer, modify code and debug programs that you legaly bought and then for personal use only!!
To ignore this warning is a criminal act and can result in lawful actions!

So please note!
I take no responsibility for how you use the information in this essay, i take NO responsibility for what might happen to you or your computer!
You use this information on your own risk!!

What I mean is: Please buy the software!

Essay written by anTiHerO ©TRES2000. All Rights Reserved.