Eternal Bliss
Re: Post TASK 4 solutions here
Sun Dec 27 14:13:08 1998


Hi,
First I tried using getdlgitemtext, getdlgitemtexta, getwindowtext, getwindowtexta but they didn't work.

So, I tried Hmemcpy which I know will break thanks to Princess... 8)
After the break, you will need to press F12 seven times to get to the program code. After the first hmemcpy break, and after getting to the program code, you will come to

:00432C31 call 0041F2E8
here, you will see that eax = the length of your Registration Code you entered.


After the 2nd hmemcpy break, do the same and you get eax = the length of your Name you entered.


Using Softice, I came to the following part...


:0043F9EE 8B45FC mov eax, dword ptr [ebp-04] <-- The code we entered
:0043F9F1 50 push eax
:0043F9F2 8D55F8 lea edx, dword ptr [ebp-08]
:0043F9F5 8B83F8010000 mov eax, dword ptr [ebx+000001F8]
:0043F9FB E8B4D6FDFF call 0041D0B4
:0043FA00 8B55F8 mov edx, dword ptr [ebp-08] <-- real code



At the same time, since my handle is Eternal Bliss, I entered EternalB as a short hand (couldn't be bothered to keep typing such a long name) and I got ymysh9ko for my registration code.
After a few failures in tracing, I had to re-enter my Name again and I made a mistake using Eternal B instead (a space in between) and I got ymysh9o for my registration code.

Looking at the similarities, and remembering one of the tutorials I read, I thought maybe each character is converted individually.
So, I started typing 7 a's and 7 b's and so on for the Name. I got what I wanted.

a=9 b=o c=3 d=u e=y f=t g=r h=6 i=w j=q k=A l=k
m=v n=h o=g p=f q=d r=s s=a t=m u=8 v=b w=eP x=1
y=x z=z 1=p 2=tx 3=W 4=V 5=X 6=-x 7=F 8=T 9=7b 0=G

It doesn't matter whether you enter your name in Caps or otherwise.

And for space (as in Eternal B and EternalB), I think space will cause the character just before it to be erased therefore explaining why there is a missing "k" in my Reg Code for "Eternal B" since l=k

remember this?

User Name: Pirate Copy
Serial No: fws9m3gfx

Well, there is a space and the reg code for "e" (Pirat"e" Copy) which is supposed to be "y" is missing too...So, I think if we entered PirateCopy instead, the reg code would be fws9my3gfx

Bye!
That's all for my contribution... I'll be having my christmas break for a few days.
Have Fun!!!

Eternal Bliss
Reg Code: ymysh9okwaa