Hardlock *.Fst to *.Reg Tool [Archive] - Reverse Engineering Team Board

Landogar

07-04-2009, 07:58 PM

Hi

i share my tool... convert *.fst to *.reg for Multikey emulator

http://rapidshare.com/files/252021360/FST_to_REG.exe.html

Git

07-05-2009, 08:13 AM

I am getting a virus warning. Did you pack it with something?.

Git

Landogar

07-05-2009, 01:39 PM

I am getting a virus warning. Did you pack it with something?.

Git

yes is packed with DotFix niceProtect
with my AV not have message (bitdefender)

pls try this

http://rapidshare.com/files/252303482/FST_to_REG.exe.html

is to packed (vmProtect)

Git

07-05-2009, 05:34 PM

File does not exist. Why are you packing it with anything?. It's not like you are protecting some big secret or huge investment. Protecting packers make programs run much slower and stop interested parties from looking at the application, and also cause false virus positives. If there is no need to protect, why do it?

Git

geophylika

07-06-2009, 02:48 AM

anyone can re_uploading!
download limit is reached.i need this tools,man,regard

Git

07-06-2009, 06:45 AM

No, you don't need this tool. How to do it manually as explained in precision detail very recently in this forum. From the FST you can extract all you need. Open the FST in a hex editor and it stares back at you in plain text.

Look at an FST file, it is 138 bytes long.

Seed1 : byte 0 & 1 (reverse byte order)
Seed2 : byte 2 & 3 (ditto)
Modad : byte 4 & 5 (ditto)
Data : byte 6 to 0x85
Seed3 : byte 0x86, 0x87, 0x88, 0x89

Here is an example FST file :

{
0x09, 0x7B, 0x1C, 0xCE, 0x7F, 0x7E, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x01, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x48, 0x61, 0x72, 0x64, 0x6C, 0x6F,
0x63, 0x6B, 0x20, 0x57, 0x69, 0x74, 0x68, 0x20, 0x4D, 0x65, 0x6D, 0x6F, 0x72, 0x79, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x0B, 0x0F, 0x03, 0x0B,
}

Seed1 = 0x7B09
Seed2 = 0xCE1C
Modad = 0x7E7F
Seed3 = 0xBF3B

Git

Landogar

07-06-2009, 06:26 PM

anyone can re_uploading!
download limit is reached.i need this tools,man,regard

new link
http://rapidshare.com/files/252788798/FST_to_REG.exe.html

geophylika

07-06-2009, 09:18 PM

very nice reply,git!
tks a lot.

Git

07-07-2009, 06:55 AM

Still getting a virus warning. Looks good though. If I may make a few suggestions...

Sometimes, the original .REG file has the ID in it. It would be useful to check for a .REG with the same modad filename and extract the ID if present. The best solver, H224, when solving old hardlock seeds has no choice but to produce multiple answers, so it also makes .fs0, .fs1, .... Your program can only choose .FST from the fileopen dialog even though it will happily open .fs0 if you type it manually, so it may be an idea to add Any File .* to the open filetype list. The file open dialog is defaulting to "My Documents" and after the first run, to the last used directory. My personal preference is to default to the current directory. I have a C Builder code fragment for that if you want it. Lastly and the most important, can you make it accept command line parameters please, and not open the gui if started from the command line, just convert with whatever it can find in the supplied filename to .reg ?

Git

foffa

07-07-2009, 01:13 PM

@Landogar

your link is broken again

you can creat collectors account and reupload file again

also working with file structure or file size will be nice too

Landogar

07-07-2009, 05:27 PM

Still getting a virus warning. Looks good though. If I may make a few suggestions...

Sometimes, the original .REG file has the ID in it. It would be useful to check for a .REG with the same modad filename and extract the ID if present. The best solver, H224, when solving old hardlock seeds has no choice but to produce multiple answers, so it also makes .fs0, .fs1, .... Your program can only choose .FST from the fileopen dialog even though it will happily open .fs0 if you type it manually, so it may be an idea to add Any File .* to the open filetype list. The file open dialog is defaulting to "My Documents" and after the first run, to the last used directory. My personal preference is to default to the current directory. I have a C Builder code fragment for that if you want it. Lastly and the most important, can you make it accept command line parameters please, and not open the gui if started from the command line, just convert with whatever it can find in the supplied filename to .reg ?

Git

hi Git
your PM full? i can not send message

Git

07-07-2009, 06:09 PM

No, plenty of PM space. Can you please be more selective with quoting, thanks.

Git

mrcdcn

09-25-2009, 09:47 PM

Could you please upload this tool again?

Git

09-26-2009, 07:17 AM

Why do I have to repeat myself so often here?. Read my message on page 1 of this thread. You do not need a tool to do this. You can do it by hand in 5 minutes. I am repeating this info here about a post I made in the same thread which was itself a repeat of a post I made previously.

Sheesh, this is supposed to be a REVERSE ENGINEERING FORUM. You are supposed to be able to reverse engineer exes and you need a tool to copy 5 values from a tiny little file?. What is up with you man?

Git