View Single Post
  #6  
Old 01-23-2018, 14:47
MistHill MistHill is offline
Family
 
Join Date: Dec 2012
Posts: 31
Rept. Given: 12
Rept. Rcvd 42 Times in 13 Posts
Thanks Given: 26
Thanks Rcvd at 135 Times in 28 Posts
MistHill Reputation: 42
Bypass the WinLicense 2.4.6.0 HWiD Check

Xentry.exe(VeDoc calculator) is protected by WinLicense 2.4.6.0.
It can not run in Windows XP because it imports APIs from dwmapi.dll.

I played in Windows 7 with your valid license file regkey.dat:
  1. Set a hardware execution breakpoint at 0147CB7B(where ModuleBase is 00400000);
  2. F9, run. waiting for user32.MessageBoxEx(NULL, "This application has been registered to\r\nSkud1 - Private 2", "WinLicense", MB_ICONINFORMATION, 0);
  3. Click Ok in MessageBox, then it should land on the BP;
  4. At here, modify DWORD [0130A21D]=7CBDC03A;
  5. Clear the BP, F9. You are free to go!

It's so simple, so easy to bypass the HWiD Check! Sad for Oreans.

For more technical details, please refer to my post years ago at tuts4you Themida 2.2.6.0, in which attached a WinLicense 2.2.6.0 example.
Reply With Quote
The Following User Gave Reputation+1 to MistHill For This Useful Post:
Mahmoudnia (01-23-2018)
The Following 6 Users Say Thank You to MistHill For This Useful Post:
Mahmoudnia (01-23-2018), Newbie_Cracker (01-30-2018), niculaita (01-24-2018), NoneForce (01-24-2018), ontryit (01-24-2018), tonyweb (02-04-2018)