Reverse Engineering Team Board

Reverse Engineering Team Board (http://www.reteam.org/board/index.php)

- Reverse Code Engineering (http://www.reteam.org/board/forumdisplay.php?f=23)

- - new reverse me!! (http://www.reteam.org/board/showthread.php?t=197)

new reverse me!!

http://geekyhackers.com/trg/regme.rar

This one is a lil bit more complicated make the startup message show that its registered and find the right serial. Anyone wanna take a try?

:D
laatez

- sixty1

Too simple. The regfile doesnt even need to contain any bytes, and the serial is in plain view.
Crudd [RET]

waaat??? The serial isnt in plain view, Unless your saying plain view as when comparison when in the register. I dont know.

Code:

UPX0:00401481 * * * * * * * * call * *sub_40946D * * * * * ; Serial routine? *Doesnt matter anyway :)



UPX0:00401486 * * * * * * * * add * * esp, 4 * * * * * * * ; EAX holds our serial after the call



UPX0:00401489 * * * * * * * * cmp * * eax, 0FA5A9C40h * * *; compare our serial with the correct serial (4200242240)



UPX0:0040148E * * * * * * * * pop * * esi



UPX0:0040148F * * * * * * * * push * *0



UPX0:00401491 * * * * * * * * push * *0



UPX0:00401493 * * * * * * * * jnz * * short loc_4014A8 * * ; jump if not correct serial (4200242240)



UPX0:00401495 * * * * * * * * push * *offset aHackThePlanet; "Hack the planet!"



UPX0:0040149A * * * * * * * * push * *offset aWowYourAPro *; "Wow your a pro!"



UPX0:0040149F * * * * * * * * push * *0



UPX0:004014A1 * * * * * * * * call * *ds:MessageBoxExA



UPX0:004014A7 * * * * * * * * retn

Crudd [RET]