+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Newb struggling to find a generated x64dbg (/showthread.php?tid=5398047)
Newb struggling to find a generated x64dbg - christianflanders - Sep 6, 2016
Hey guys I'm new to this reverse engineering thing and I've been trying to crack this challenging software, however I can't seem to find a generated key/string anywhere. I've forced entry into the successful registration subroutines and jumped the failures. However I suspect that all I have managed to do was just bruteforce the dialogue boxes, as I have checked the heap and cannot find any generated passcodes. So I'm here asking for tips and clues that could help me solve the case. It's an unpacked 64bit software with high entropy in the body of the software. If you would like further info just reply.
Code
00007FF69192891B | 80 BC 24 50 | cmp byte ptr ss:[rsp+150],0 |
00007FF691928923 | E9 B8 00 00 | jmp androidiphonewhatsapptransferplus.7FF691 | **change to always jump so it registers successfully
00007FF691928928 | 00 8B D3 48 | add byte ptr ds:[rbx+D8D48D3],cl |
00007FF69192892E | 65 F7 0C 00 | test dword ptr gs:[rax+rax],C51815FF |
00007FF691928936 | 0C 00 | or al,0 |
00007FF691928938 | 48 89 84 24 | mov qword ptr ss:[rsp+130],rax |
00007FF691928940 | 45 33 C0 | xor r8d,r8d |
00007FF691928943 | 48 8D 94 24 | lea rdx,qword ptr ss:[rsp+130] |
00007FF69192894B | 48 8D 8C 24 | lea rcx,qword ptr ss:[rsp+A0] |
00007FF691928953 | E8 68 66 FE | call androidiphonewhatsapptransferplus.7FF69 |
00007FF691928958 | 90 | nop |
00007FF691928959 | 45 33 C9 | xor r9d,r9d |
00007FF69192895C | 4C 8D 84 24 | lea r8,qword ptr ss:[rsp+A0] |
00007FF691928964 | B2 01 | mov dl,1 |
00007FF691928966 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+50] |
00007FF69192896B | E8 B0 03 00 | call androidiphonewhatsapptransferplus.7FF69 |
00007FF691928970 | 90 | nop |
00007FF691928971 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+50] |
00007FF691928976 | E8 55 13 00 | call androidiphonewhatsapptransferplus.7FF69 |
00007FF69192897B | 8D 53 08 | lea edx,dword ptr ds:[rbx+8] |
00007FF69192897E | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+50] |
00007FF691928983 | FF 15 BF C2 | call qword ptr ds:[<&public: void __cdecl QT |
00007FF691928989 | 48 8D 8C 24 | lea rcx,qword ptr ss:[rsp+A0] |
00007FF691928991 | FF 15 41 DA | call qword ptr ds:[<&public: int __cdecl QDi |
00007FF691928997 | 83 F8 01 | cmp eax,1 |
00007FF69192899A | 75 11 | jne androidiphonewhatsapptransferplus.7FF691 |
00007FF69192899C | 0F B6 84 24 | movzx eax,byte ptr ss:[rsp+C8] |
00007FF6919289A4 | 84 C0 | test al,al |
00007FF6919289A6 | 75 05 | jne androidiphonewhatsapptransferplus.7FF691 |
00007FF6919289A8 | 41 B4 01 | mov r12b,1 |
00007FF6919289AB | EB 03 | jmp androidiphonewhatsapptransferplus.7FF691 |
00007FF6919289AD | 45 32 E4 | xor r12b,r12b |
00007FF6919289B0 | 48 8D 54 24 | lea rdx,qword ptr ss:[rsp+50] |
00007FF6919289B5 | 48 8D 8C 24 | lea rcx,qword ptr ss:[rsp+A0] |
00007FF6919289BD | E8 FE 60 FE | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289C2 | 90 | nop |
00007FF6919289C3 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+50] |
00007FF6919289C8 | E8 E3 03 00 | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289CD | 90 | nop |
00007FF6919289CE | 48 8D 8C 24 | lea rcx,qword ptr ss:[rsp+A0] |
00007FF6919289D6 | E8 C5 5D FE | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289DB | 45 84 E4 | test r12b,r12b |
00007FF6919289DE | 74 51 | je androidiphonewhatsapptransferplus.7FF6919 |
00007FF6919289E0 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+30] |
00007FF6919289E5 | E8 F6 E2 FF | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289EA | 48 8B D0 | mov rdx,rax |
00007FF6919289ED | 48 8B CF | mov rcx,rdi |
00007FF6919289F0 | E8 CB E9 FF | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289F5 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+38] |
00007FF6919289FA | E8 E1 E2 FF | call androidiphonewhatsapptransferplus.7FF69 |
00007FF6919289FF | 48 8B D0 | mov rdx,rax |
00007FF691928A02 | 48 8B CF | mov rcx,rdi |
00007FF691928A05 | E8 96 FB FF | call androidiphonewhatsapptransferplus.7FF69 |
00007FF691928A0A | 48 8B CF | mov rcx,rdi |
00007FF691928A0D | E8 0E 93 07 | call androidiphonewhatsapptransferplus.7FF69 |
00007FF691928A12 | 8B D3 | mov edx,ebx |
00007FF691928A14 | 48 8D 0D B5 | lea rcx,qword ptr ds:[7FF691A00FD0] | 7FF691A00FD0:"Registered Successfully!"
00007FF691928A1B | FF 15 2F C4 | call qword ptr ds:[<&private: static struct |
00007FF691928A21 | 48 89 44 24 | mov qword ptr ss:[rsp+20],rax |
00007FF691928A26 | 48 8D 4C 24 | lea rcx,qword ptr ss:[rsp+20] |
00007FF691928A2B | E8 90 50 FE | call androidiphonewhatsapptransferplus.7FF69 |
00007FF691928A30 | 90 | nop |