IDA/W32DASM

Some asm Knowledge

Target: TempClean v3.0

Author: hEYWIRE

About:

The purpose of this Tutorial is to offer help to anyone wishing to study the art of Reverse Code Engineering. Breaking protection systems in programs is an intellectual challenge, it should NOT be used to steal software. REMEMBER, I do my cracks/keygens as a hobby and challenge, so please, if you like the utility you crack and keep using it, support the author and pay for it! . Peace hEYWIRE

Program Info:

TempClean cleans temporary directories or search for temporary files across your hard disk so there is no need for you to think about trash that can fill up your disk. You can easy add WINDOWS/TEMP, Internet cache, Document history or any other directories you want and let TempClean clean them on every Windows start so you don't have to think about it.

Registering :

Ok here we go, IM just going to list for you what to doScan target to see if its packed/Encrypted with your favorite PE identifier (Not in this case) Enter in registering details

Ok now break into SoftICE , you now know its written in Delphi. Ok so you know what Breakpoint to set ‘BPX hmemcpy’ break out of SoftICE and hit the OK button. SoftICE will break, hit F5 again, and F12 till you get into the programs code. Ok do a search for you NICK and but a BPX on it in memory. Hit F5 and SoftICE will break, and now the fun starts. You should land here:

OK so all the above peace of code does is this:

So the number for our NICK ends up in EAX, you can try this number and see if it’s a valued serial number. But guess what its not.

Ok so on with the traceing till we land here:

Ok so the above peace of code checks the FIRST character of your NICK to see it’s a valued character and to see if it’s a CAPAITL letter. If not it then takes 20h (32) away to make it a CAPAITL letter. So the program is going to use this letter somewhere in the Serial number. Let’s keep traceing. Trace till you land here:

The peace of code above is very simple to understand so ill just move on quickly. Just incase you don’t know what its doing here it is. All its doing is checking the fourth number of you serial number against the letter it took from your NICK. Follow it in SoftICE and you‘ll get to see how it works. Ok so lets set a break point somewhere on the above peace of code, just incase we don’t have the full serial number yet. So type in the number you got for your Nick and replace the fourth number with the Capital letter of you NICK’S first character. Make sense? Try it. No good! Ok keep traceing watching out for the registers and any calls that might bee interesting. Trace till you land here:

Ok the above peace of code compares the first 3 numbers of your dummy serial number against EDX, which is equal to TC3. So now lets check the serial number we have. It should be in this style.

TC3-XXXLXXX

X = number

L = First letter of you NICK in UPPERCASE

Try the serial number now. And that’s it. It’s a tricky enough program, but just watch out for the registers and even in the Data window you might see a valued serial number if you get to the CMP with TC3. To make a keygen for this program you really only have to study one part.Now go try it!

Final Notes :

That’s it for this Tutorial, hope you learned something, if there is any spelling mistake or grammar errors then forgive me, IM only human. Just a short note, REMEMBER, I do my cracks/keygens as a hobby and challenge, so please, if you like the utility you crack and keep using it, support the author and pay for it! Peace hEYWIRE