Jeff
Manipulating 'Reg' file
Thu Nov 12 23:41:38 1998


Howdy all!

I shore hope this post of mine is not what keeps coming up as called a keygenerator????? I'll Have to slap myself around and toss my butt out of my chair.

For those that have already acomplished the first part of the project
you now know that by witnessing RegMons search and seek for a file called HKCU Software Noktasoftware Uninstallmanager Reg <<<<---The Reg file is 'not found'.

For those having not gone into Regedit before

By opening Regedit and opening the above directories until you get to the UninstallManager folder you see this data inside the Uninstall Manager folder:

ab [Default] [value not set]
ab Path "C:UM"

Now by right clicking in the left panel area; U will get a 'new' option
with 4 addttional options to choose from.

Key

String value
Binary value
Dword value

Choose string value:
A new line will be added; looks like this:

ab New Value #1 ""


While it is still highlighted click inside the box, & delete the words New value #1, now retype the new name that it needs...Reg <<---

Now this new Reg file is what RegMon was looking for and did not find; but there is no value in it as yet; How can we find this;

One way is to browse thru Dasm find some interesting jumps; pop ice; and hope the jumps changes and regs this program for you. Then of coarse the data will be auto. filled in.

Without the two KEY letters that remain constant at the beginning of the data key I would never have found an interesting (for me) finding.

I had changed a jump (later for that line #) and the program reged.YEA!
I noticed that my reg file (in registry) now looked like this:

ab Reg "I@Bi{" <<<-Jas my user name.


Thinking that if I entered the same info., that I had, once before, entered into the User and key box ... that it would once agian be reged ... I typed
"Bi{"
into the Reg file, in registry,...I tried it.
Did not work. Great.

So I once again HAD to go back into Ice and find that jumps (*grin; is it one or two?*) and once again it said it was reged and created this in my Registry Reg file:



This time I choose a different yet similar name

ab Reg "I@Bi{eif"<<<---jasman

Where is the pattern...

Well first;
It always begins with I@;
I@ turns out to be (I think anyway) the Authors Initials.

Notice above where my entry did not work... it is because I forgot to include the "I@"<<-this is not shown in the 'About box',when your name is added behind it.

This (accidental reging) is how I found this out; and more.

Seeing that Bi{ = Jas <<<- notice the upper case; and lower case;



AND that, ab Reg "I@Bi{eif"<<<---jasman...BOTH continued to reieve a 'constant' value for the 'jas' I knew at this point that the code "would.class" tppabs="http://disc.server.com/would.class" not be randomly choosen.

So, I did a switch. I right clicked on Reg file; Clicked on 'Modify' and erased Bi{ from the data box;
and, I then typed in Jas in to the data box.
hit OKAY.

Now my Reg file looks like this:

ab Reg "I@Jas"

Now go back to and open the program;
click on the Help About ( 30 day Nag screen still present on mine)click okay; and you see this, in Noktasoftware box...

This product is licensed to: Bi{

I then went back into reg and tried this same thing with several different names; and I kept acumulating more code for each new letter I put into a new name; Comparing them to make sure they were 'constants'... and then it occured to me...and I kept remembering a hint that the Sandman had told me that I did not follow at the time... BUT I now SAW it,(Are you *grinning* Sandman?)
and so, I did this...

Clicking on the Modify option I now filled the data in with this:

ab Reg "I@ABCDEFGHIJKLMNOPQRSTUVWXYZ"
I then went and opened the program and now in my about box I saw this:

This product is licensed to: IJKLMNO@ABCDEFGXYZ[]^_PQR

De code; De code:


......... A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
code-->I J K L M N O @ A B C D E F G X Y Z [ ] ^ _ P Q R

I now had all the info. I needed to Reg my name in the about box in full Caps...Or Your name.

J=B
A=I
S=[

ab Reg "I@BI["

This product is licensed to: JAS

:) :)

slightly different than my input ealier; hummm; oh yes these are all caps; may have to do it all over again for LOWER case letters; (?)

As you can als0 see extrapolating from the code above
I@ = AH = The Authors initials...


We must GET RID of that Irritating 30 day Rag Screen also!

I have MANY times seen this string in DASM "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
AND ASLO in lower case...does this mean that this info above might work in other programs?

Hope this has been imformative;

Jeff