(MASM) HTTP Debugger Pro_KG

[TempoMat]

Originally Posted by TeRcO

The Target must be installed to determine the version,
as it is used to calculate the Serial Number.

Hi TeRcO,
I don't have the privilege to download any attachment, so I tried to debug the original Program and these are my observations:

1 . The version of the program is used together with the VolumeID of "C:\" to generate the name of the String (RegKeyName) eg. "SN1892438799" where the Activation License is saved.

2. The check for the activation License itself neither uses the Version nor the VolumeID, though I can imagine it been used for generating the Activation License as the SN is sent as well for the activation.

3. The activation request is sent in the form
httpx://www.httpdebugger.com/tools/activate2.ashx?systemid=SID&systemid1=SID1&systemid2=SID2&systemid3=SID3&hash=HASH1&ver=10.0.0.1&sn=1892438799"

Where SID, SID1 and SID2 are RNDs and HASH1 = MachineGUID retrieved from the registry.

4. The Program always tries to check/verify the license online when it launches.
So how are you avoiding that without patching the program?

Regards,
TempoMat

[tame_mpeg]

Originally Posted by TempoMat

Hi TeRcO,
I don't have the privilege to download any attachment, so I tried to debug the original Program and these are my observations:

1 . The version of the program is used together with the VolumeID of "C:\" to generate the name of the String (RegKeyName) eg. "SN1892438799" where the Activation License is saved.

2. The check for the activation License itself neither uses the Version nor the VolumeID, though I can imagine it been used for generating the Activation License as the SN is sent as well for the activation.

3. The activation request is sent in the form
httpx://www.httpdebugger.com/tools/activate2.ashx?systemid=SID&systemid1=SID1&systemid2=SID2&systemid3=SID3&hash=HASH1&ver=10.0.0.1&sn=1892438799"

Where SID, SID1 and SID2 are RNDs and HASH1 = MachineGUID retrieved from the registry.

4. The Program always tries to check/verify the license online when it launches.
So how are you avoiding that without patching the program?

Regards,
TempoMat

You could check this analysis out if you're interested.
https://www.cnblogs.com/DirWang/p/19927598
Also results in a keygen.