Subj : Re: Cracking DOS software
To   : Fusion
From : AKAcastor
Date : Fri Apr 05 2024 00:01:16

 f> run the door in dosbox with those codes, then MEMDUMPBIN 0:0 640000 or 
 f> whatever and find where they are in memory (or just 
 f> search around in the debugger itself) then change the 
 f> NoBoDy! part and then MEMDUMPBIN again the next run and 
 f> see what the memory area the ii.. part used to be in 
 f> changes to? that's how i used Arrowbridge I and II & 
 f> Betrayal of the Obsidian Baboon to keygen themselves. i 
 f> would find the old code in memory twice, and then the 
 f> second run the second spot would have the new code in it 
 f> for the new sysop/bbs name..

Good technique!  Can confirm it works on DOS 16-bit Blue Wave mail reader.  With a breakpoint after the registration check, the valid key can be read from the stack.


Chris/akacastor

--- Maximus 3.01
 * Origin: Another Millennium - Canada - another.tel (21:1/162)

.