Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 07-04-2009, 07:58 PM
Landogar Landogar is offline
Member
 
Join Date: Dec 2007
Posts: 28
Default Hardlock *.Fst to *.Reg Tool

Hi

i share my tool... convert *.fst to *.reg for Multikey emulator

http://rapidshare.com/files/25202136...o_REG.exe.html
Reply With Quote
  #2  
Old 07-05-2009, 08:13 AM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

I am getting a virus warning. Did you pack it with something?.

Git
Reply With Quote
  #3  
Old 07-05-2009, 01:39 PM
Landogar Landogar is offline
Member
 
Join Date: Dec 2007
Posts: 28
Default

Quote:
Originally Posted by Git View Post
I am getting a virus warning. Did you pack it with something?.

Git
yes is packed with DotFix niceProtect
with my AV not have message (bitdefender)

pls try this

http://rapidshare.com/files/25230348...o_REG.exe.html

is to packed (vmProtect)
Reply With Quote
  #4  
Old 07-05-2009, 05:34 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

File does not exist. Why are you packing it with anything?. It's not like you are protecting some big secret or huge investment. Protecting packers make programs run much slower and stop interested parties from looking at the application, and also cause false virus positives. If there is no need to protect, why do it?

Git
Reply With Quote
  #5  
Old 07-06-2009, 02:48 AM
geophylika geophylika is offline
Senior Member
 
Join Date: Jul 2008
Location: China
Posts: 77
Default

anyone can re_uploading!
download limit is reached.i need this tools,man,regard
Reply With Quote
  #6  
Old 07-06-2009, 06:45 AM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

No, you don't need this tool. How to do it manually as explained in precision detail very recently in this forum. From the FST you can extract all you need. Open the FST in a hex editor and it stares back at you in plain text.

Look at an FST file, it is 138 bytes long.

Seed1 : byte 0 & 1 (reverse byte order)
Seed2 : byte 2 & 3 (ditto)
Modad : byte 4 & 5 (ditto)
Data : byte 6 to 0x85
Seed3 : byte 0x86, 0x87, 0x88, 0x89

Here is an example FST file :

Code:
{
    0x09, 0x7B, 0x1C, 0xCE, 0x7F, 0x7E, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x01, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x48, 0x61, 0x72, 0x64, 0x6C, 0x6F, 
    0x63, 0x6B, 0x20, 0x57, 0x69, 0x74, 0x68, 0x20, 0x4D, 0x65, 0x6D, 0x6F, 0x72, 0x79, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 
    0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x0B, 0x0F, 0x03, 0x0B, 
}
Seed1 = 0x7B09
Seed2 = 0xCE1C
Modad = 0x7E7F
Seed3 = 0xBF3B

Git
Reply With Quote
  #7  
Old 07-06-2009, 06:26 PM
Landogar Landogar is offline
Member
 
Join Date: Dec 2007
Posts: 28
Default

Quote:
Originally Posted by geophylika View Post
anyone can re_uploading!
download limit is reached.i need this tools,man,regard
new link
http://rapidshare.com/files/25278879...o_REG.exe.html
Reply With Quote
  #8  
Old 07-06-2009, 09:18 PM
geophylika geophylika is offline
Senior Member
 
Join Date: Jul 2008
Location: China
Posts: 77
Default tks git 4 u help

very nice reply,git!
tks a lot.
Reply With Quote
  #9  
Old 07-07-2009, 06:55 AM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

Still getting a virus warning. Looks good though. If I may make a few suggestions...

Sometimes, the original .REG file has the ID in it. It would be useful to check for a .REG with the same modad filename and extract the ID if present. The best solver, H224, when solving old hardlock seeds has no choice but to produce multiple answers, so it also makes .fs0, .fs1, .... Your program can only choose .FST from the fileopen dialog even though it will happily open .fs0 if you type it manually, so it may be an idea to add Any File .* to the open filetype list. The file open dialog is defaulting to "My Documents" and after the first run, to the last used directory. My personal preference is to default to the current directory. I have a C Builder code fragment for that if you want it. Lastly and the most important, can you make it accept command line parameters please, and not open the gui if started from the command line, just convert with whatever it can find in the supplied filename to .reg ?

Git
Reply With Quote
  #10  
Old 07-07-2009, 01:13 PM
foffa foffa is offline
Senior Member
 
Join Date: Jul 2007
Location: %TEMP%
Posts: 344
Default

@Landogar

your link is broken again

you can creat collectors account and reupload file again

also working with file structure or file size will be nice too
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2023, Jelsoft Enterprises Ltd.