Safengine Licensor v2.4 (HWID Lock)

[Sean Park - Lovejoy]

View File

Safengine Licensor v2.4 (HWID Lock)

---

I coded a simple Win x64 GUI application with a close button and protected it using Safengine Shielden v2.4.

Challenge is to;

1. bypass the hardware ID lock;
2. unpack the application.

Let us go together to solve this issue.

---

• Submitter
  The Binary Expert
• Submitted
  06/11/2024
• Category
  UnPackMe

 

[Sh4DoVV]

It doesn't show any hwid and program loaded

Edited June 11 by Sh4DoVV

[Sean Park - Lovejoy]

3 hours ago, Sh4DoVV said:

It doesn't show any hwid and program loaded

@Sh4DoVV Delete the key file?

Regards.

sean.

 

[Sh4DoVV]

You right , but I think it doesn't depend on hwid , because with your sent license it worked on my pc

[Sean Park - Lovejoy]

27 minutes ago, Sh4DoVV said:

You right , but I think it doesn't depend on hwid , because with your sent license it worked on my pc

@Sh4DoVV Can you bypass it without the license key file?

Use this key file.

Win64GUI.key

Regards.

sean.

Edited June 12 by Sean Park - Lovejoy

[Sh4DoVV]

send valid hwid of above license

[Sean Park - Lovejoy]

1 hour ago, Sh4DoVV said:

send valid hwid of above license

Quote

1+LKtQAIEADBBggAiNEjZpQnBgc04c7m++msDA==

Regards.

sean.

[boot]

On 6/11/2024 at 10:02 PM, Sean Park - Lovejoy said:

bypass the hardware ID lock

3 hours ago, Sean Park - Lovejoy said:

bypass it without the license key file

Use this key file.

Win64GUI.key 6.35 kB · 3 downloads

1 hour ago, Sean Park - Lovejoy said:

1+LKtQAIEADBBggAiNEjZpQnBgc04c7m++msDA==

IPHLPAPI - Win64GUI.zip

On 6/11/2024 at 10:02 PM, Sean Park - Lovejoy said:

unpack the application

Looking forward to some unpack tutorials.

[Sean Park - Lovejoy]

7 minutes ago, boot said:

IPHLPAPI - Win64GUI.zip 397.75 kB · 1 download

Looking forward to some unpack tutorials.

@boot Can't you unpack this target yet?

Regards.

sean.

[boot]

10 minutes ago, Sean Park - Lovejoy said:

Can't you unpack this target yet?

Regards.

sean.

I don't think my answer is suitable for marking as a solution. If possible, please unmark this reply. The process of patching HWID is quite cumbersome, so I am looking forward to finding unpack or keygen tutorials. I spent some time rewriting and creating a fake IPHLPAPI.DLL. In addition, some special compilation modes were also used.

Edited June 12 by boot

[Sean Park - Lovejoy]

7 minutes ago, boot said:

I don't think my answer is suitable for marking as a solution. If possible, please unmark this reply. The process of patching HWID is quite cumbersome, so I am looking forward to finding unpack or keygen tutorials. I spent some time rewriting and creating a fake IPHLPAPI.DLL. In addition, some special compilation modes were also used.

@boot Can you post a video guide to show how to change the hardware id?

Regards.

sean.

[Sean Park - Lovejoy]

Refer to this post.

Firstly, searching for the "RegQueryValueExA" ASCII.

After that, scrolling up a little and setting a breakpoint at a "jmp" up ---> "EB ??"

Then running the application.

Secondly, you can search for these byte array.

Quote

40 86 FB

It is this.

xchg bl, dil

Setting a breakpoint at the command.

Lastly, Seaching for your hardware id string's base64 hex values in the memory. then changing them to the working hardware id string's base64 hex values.

After all, It will run bypassing HWID lock of the Safengine Shielden x64 v2.4.

Regards.

sean.

Edited June 12 by Sean Park - Lovejoy

[Sean Park - Lovejoy]

The youtube video for the solution.

 

Regards.

sean.

[Sh4DoVV]

Hi

Short tutorial for bypass Safengine 2.4 HWID

Regards.

Safengine Short Tutorial.rar

[Sean Park - Lovejoy]

6 hours ago, Sh4DoVV said:

Hi

Short tutorial for bypass Safengine 2.4 HWID

Regards.

Safengine Short Tutorial.rar 6.89 MB · 14 downloads

@Sh4DoVV Searching for

Quote

8A 01 42 88 04 21

Regards.

sean.

[POOP COME]

My license got expired how I can reuy it I try runasdate and startwithdate Any way to buy expired nag

Method doesn't not working in 32 application I also try RegQueryValueExA not working.Any other way?