Sandboxie 3.50 seraj,´´

[Guest 666]

http://www.nsanedown.com/?request=12225906

[Guest Guest]

Opps. I pressed enter when I shouldn't :fear:

Anyway serial is blacklisted.

I've seen a post in another board about how to crack sandboxie:

www.sandboxie.com :: View topic - Online Activation in Version 3.47

Very sad indeed sandboxie 3.48 cracked - Page 3 - Wilders Security Forums

I've been investigating this, looked over the nuked cracks for 3.48 (by tonyblair and vokeon), and I am now trying to crack Sandboxie 3.49.13 with IDA Pro. So far I've managed to cheat sandboxie license manager to say it is activated (just like the others did) by patching SbieDll.dll and I get sandboxie to work with extended features for an hour by using an older key (I think sandboxie has some inner timer that causes SBIE1310 error after an hour).

I am wondering if any of you has any skills to reverse this (altrough I know this is not the most appropriate place to ask :icon_whistle: ).

Some details:

Fake Key:

REGEDIT4
[-HKEY_CLASSES_ROOT\CLSID\{98E6BD24-2D93-41A5-BC6D-CB7C1507318B}]
[HKEY_CLASSES_ROOT\CLSID\{98E6BD24-2D93-41A5-BC6D-CB7C1507318B}]
"I"=hex:
"K"="9WZFYRB"

SbieDll.dll changes

.text:7D246D2E ; =============== O R I G I N AL =======================================
.text:7D246D2E
.text:7D246D2E
.text:7D246D2E ; __stdcall SbieApi_QueryLicense(x, x)
.text:7D246D2E                 public _SbieApi_QueryLicense@8
.text:7D246D2E _SbieApi_QueryLicense@8 proc near       ; DATA XREF: .text:off_7D256278o
.text:7D246D2E
.text:7D246D2E var_8           = dword ptr -8
.text:7D246D2E
.text:7D246D2E                 push    ebx
.text:7D246D2F                 mov     ebx, esp
.text:7D246D31                 push    ecx
.text:7D246D32                 push    ecx
.text:7D246D33                 and     esp, 0FFFFFFF8h
.text:7D246D36                 add     esp, 4
.text:7D246D39                 push    ebp
.text:7D246D3A                 mov     ebp, [ebx+4]
.text:7D246D3D                 mov     [esp+0Ch+var_8], ebp
.text:7D246D41                 mov     ebp, esp
.text:7D246D43                 sub     esp, 50h
.text:7D246D46                 mov     dword ptr [ebp-40h], 12340028h
.text:7D246D4D                 and     dword ptr [ebp-3Ch], 0
.text:7D246D51                 mov     eax, [ebx+8]
.text:7D246D54                 xor     ecx, ecx
.text:7D246D56                 mov     [ebp-38h], eax
.text:7D246D59                 mov     [ebp-34h], ecx
.text:7D246D5C                 lea     eax, [ebp-48h]
.text:7D246D5F                 cdq
.text:7D246D60                 mov     [ebp-30h], eax
.text:7D246D63                 mov     [ebp-2Ch], edx
.text:7D246D66                 lea     eax, [ebp-40h]
.text:7D246D69                 push    eax
.text:7D246D6A                 call    sub_7D24674A
.text:7D246D6F                 mov     [ebp-4Ch], eax
.text:7D246D72                 cmp     dword ptr [ebp-4Ch], 0
.text:7D246D76                 jl      short loc_7D246D88
.text:7D246D78                 mov     eax, [ebx+0Ch]
.text:7D246D7B                 mov     ecx, [ebp-48h]
.text:7D246D7E                 mov     [eax], ecx
.text:7D246D80                 mov     ecx, [ebp-44h]
.text:7D246D83                 mov     [eax+4], ecx
.text:7D246D86                 jmp     short loc_7D246D92
.text:7D246D88 ; ---------------------------------------------------------------------------
.text:7D246D88
.text:7D246D88 loc_7D246D88:                           ; CODE XREF: SbieApi_QueryLicense(x,x)+48j
.text:7D246D88                 mov     eax, [ebx+0Ch]
.text:7D246D8B                 and     dword ptr [eax], 0
.text:7D246D8E                 and     dword ptr [eax+4], 0
.text:7D246D92
.text:7D246D92 loc_7D246D92:                           ; CODE XREF: SbieApi_QueryLicense(x,x)+58j
.text:7D246D92                 mov     eax, [ebp-4Ch]
.text:7D246D95                 mov     esp, ebp
.text:7D246D97                 pop     ebp
.text:7D246D98                 mov     esp, ebx
.text:7D246D9A                 pop     ebx
.text:7D246D9B                 retn    8
.text:7D246D9B _SbieApi_QueryLicense@8 endp

.text:7D246D2E ; =============== C R A C K E D =======================================
.text:7D246D2E
.text:7D246D2E
.text:7D246D2E ; __stdcall SbieApi_QueryLicense(x, x)
.text:7D246D2E                 public _SbieApi_QueryLicense@8
.text:7D246D2E _SbieApi_QueryLicense@8 proc near       ; DATA XREF: .text:off_7D256278o
.text:7D246D2E
.text:7D246D2E var_8           = dword ptr -8
.text:7D246D2E
.text:7D246D2E                 push    ebx
.text:7D246D2F                 mov     ebx, esp
.text:7D246D31                 push    ecx
.text:7D246D32                 push    ecx
.text:7D246D33                 and     esp, 0FFFFFFF8h
.text:7D246D36                 add     esp, 4
.text:7D246D39                 push    ebp
.text:7D246D3A                 mov     ebp, [ebx+4]
.text:7D246D3D                 mov     [esp+0Ch+var_8], ebp
.text:7D246D41                 mov     ebp, esp
.text:7D246D43                 sub     esp, 50h
.text:7D246D46                 mov     dword ptr [ebp-40h], 12340028h
.text:7D246D4D                 and     dword ptr [ebp-3Ch], 0
.text:7D246D51                 mov     eax, [ebx+8]
.text:7D246D54                 xor     ecx, ecx
.text:7D246D56                 mov     [ebp-38h], eax
.text:7D246D59                 mov     [ebp-34h], ecx
.text:7D246D5C                 lea     eax, [ebp-48h]
.text:7D246D5F                 cdq
.text:7D246D60                 mov     [ebp-30h], eax
.text:7D246D63                 mov     [ebp-2Ch], edx
.text:7D246D66                 lea     eax, [ebp-40h]
.text:7D246D69                 nop
.text:7D246D6A                 nop
.text:7D246D6B                 nop
.text:7D246D6C                 nop
.text:7D246D6D                 nop
.text:7D246D6E                 nop
.text:7D246D6F                 mov     [ebp-4Ch], eax
.text:7D246D72                 nop
.text:7D246D73                 nop
.text:7D246D74                 nop
.text:7D246D75                 nop
.text:7D246D76                 nop
.text:7D246D77                 nop
.text:7D246D78                 mov     eax, [ebx+0Ch]
.text:7D246D7B                 mov     ecx, [ebp-48h]
.text:7D246D7E                 mov     dword ptr [eax], 6666666h
.text:7D246D84                 mov     dword ptr [eax+4], 6666666h
.text:7D246D8B                 nop
.text:7D246D8C                 nop
.text:7D246D8D                 nop
.text:7D246D8E                 nop
.text:7D246D8F                 nop
.text:7D246D90                 nop
.text:7D246D91                 nop
.text:7D246D92                 nop
.text:7D246D93                 nop
.text:7D246D94                 nop
.text:7D246D95                 mov     esp, ebp
.text:7D246D97                 pop     ebp
.text:7D246D98                 mov     esp, ebx
.text:7D246D9A                 pop     ebx
.text:7D246D9B                 retn    8
.text:7D246D9B _SbieApi_QueryLicense@8 endp

If you can help, please reply :)

Regards,

NewEraCracker.

Anyone?