How to Crack Registry Toolkit 2.1

How to Crack Registry Toolkit 2.1

About the target : Registry Toolkit is a utility for advanced computer users that performs search &/or replacement operations on the Windows 95/98/NT registry. You can search/replace in registry data, values, keys (or any combination) and specify the types of data to process. If you cancel a search the results up to that point (if any) are displayed in a tree list. You can create and edit keys, values, & data, and delete keys & values (after confirmation), and undo the last changes made. Registry Toolkit will operate on a remote registry (if you have permission to do so). It's really a good tools compared to microsoft regedit :)

The Protection : Simple nag screen in startup.

Tools : Wdasm 8.93, Borland Resource Writer(BRW) 4.5, A good Hex Editor, my favaorit is HexWorkshop 2.54 and Ultra Edit 6.x

Essay : After you run this progs, now you know that is has a nag screen, right ? :) So now you need to run the BRW, and find the dialog that match the one that we see as the nag. You'll found it on dialog resource number 100, it's 64 in hex. So, now you need to run the Wdasm, disasm the file, and find the resource 64h in the dialog resource. Now you'll find it here :

:0040118E 50 PUSH EAX
:0040118F 6A64 PUSH 64 -->> Push the Dialog resource
:00401191 89742410 MOV [ESP+10],ESI
:00401195 E84FEB0200 CALL 0042FCE9 -->> Show it on screen
:0040119A 8D4E5C LEA ECX,[ESI+5C]
:0040119D C744241400000000 MOV DWORD PTR [ESP+14],00000000

So how to crack it ? Simply replace the PUSH 64, with PUSH 00, So find in your hex editor : 506A6489742410 and replace it with 506A0089742410. Now save the files, and try to run the progs, YAP ! The progs run find without any nag screen. But now when you click on help, there is nothing to show, cause we already destroy it, remember ? Anyway, it's very important that you check the progs after you cracked nag screen, with the approach above, it's because sometimes, diligent programmer, check the return value of the dialog screen, so if it's failed to show on screen, the progs exit immediately, or do something.

To Practice, crack another software in their site (Funduc), they all have the same protection.