Explore responsibly, for knowledge is power!

/*
  Will be moved to tools section shortly /str0ke

  Name: Windows Genuine Advantage Validation Patch
  Copyright: NeoSecurityTeam
  Author: HaCkZaTaN <hck_zatan@hotmail.com>
  Date: 31/07/05 21:42
  Description: LegitCheckControl.dll (1.3.254.0) 
  
 Ä¿
                    -==[N]eo [S]ecurity [T]eam Inc.==-                   
 
      TiTLE : Windows Genuine Advantage Validation                         Ä´
     AUTHOR : HaCkZaTaN                                                    Ä¿
                            -==Information==-                              
                                                                            LegitCheckControl.dll (1.3.254.0)                                                                                                                
 Ä¿
                            -==Contact==-                                
 
                                                                         
    [N]eo [S]ecurity [T]eam [NST] - http://www.neosecurityteam.net/     
    HaCkZaTaN <hck_zatan@hotmail.com>                                    
    Irc.GigaChat.Net #uruguay                                            
                                                                         
 Ä¿
                               -==Greets==-                              
 
                                                                         
                             NST's Staff                                 
                             erg0t                                       
                             ][GB][                                      
                             Beford                                      
                             LINUX                                       
                             Heap                                        
                             CrashCool                                   
                             Makoki                                      
                             And my Colombian people                     
                                                                           Ä¿
                    -==[N]eo [S]ecurity [T]eam Inc.==-                   
 
                               
                                          
                                   
                                           
                                   

*/

#include <stdio.h>

typedef struct bytepair BYTEPAIR;

struct bytepair
{
       long offset;
       char val;
}; 

static const BYTEPAIR byte_pairs[3]= { 
{0x2BE98, 0x33},
{0x2BE99, 0xC0},
{0x2BE9A, 0x90},
};

int main(int argc, char *argv[])
{
    FILE *LegitCheckControl;
    int i;

    printf("\n\t\n"
           "\tß±\n"
           "\t                                                         \n"
           "\t           [N]eo [S]ecurity [T]eam [N][S][T]             \n"
           "\t      [Windows Genuine Advantage Validation Patch]       \n"
           "\t             LegitCheckControl.dll (1.3.254.0)           \n"
           "\t                                                         \n"
           "\t               \n"
           "\t                       \n"
           "\t                              \n"
           "\t                            \n"
           "\t                            \n"
           "\t                               \n"
           "\t                             \n"
           "\t                            \n"
           "\t                                        \n"
           "\t                                  \n"
           "\t                                                         \n"
           "\t                 [ HaCkZaTaN  ..... ]                    \n"
           "\t                 [ Paisterist ..... ]                    \n"
           "\t                 [ Daemon21   ..... ]                    \n"
           "\t                 [ g30rg3_x   ..... ]                    \n"
           "\t            [ Http://WwW.NeoSecurityTeam.Net ]           \n"
           "\t                                                         \n"
           "\t\n"
           "\t \n\n\n");
           
           getchar();
           LegitCheckControl = fopen("LegitCheckControl.dll", "r+");
           
           if (LegitCheckControl == (FILE *)0)
           {
                       printf("LegitCheckControl.dll not found. Aborting.\n\n");
                       printf("Hit <Enter> to quit.");
                       getchar();
                       return 1;
           }
           
           printf("Starting...\n");
           
           for (i = 0; i < 3; i++)
           {
               fseek(LegitCheckControl, byte_pairs[i].offset, SEEK_SET);
               fwrite(&byte_pairs[i].val, 1, 1, LegitCheckControl);
           }
           
           fclose(LegitCheckControl);
           printf("->Patch completed.\n\n");
           printf("Done, enjoy...\n\n");
           getchar();

           return 0;
}

// milw0rm.xmc.pl [8x16*32^n]