How to crack POP3Connector 4.10
===============================

This software can let you receive many web based email using POP3 protocal
Email client software such as Outlook Express just like it was a POP3 account.
Also, it can be used for POP3 and web based mail checker. Now it support Hotmail, 
Excite, Yahoo, Netaddress (usa.net), Netscape mail, AmExMail, HotVoice, Email 
and mail.com. Following is the description from the author:

Now you can download all of your messages and their attachments from Hotmail, 
Excite, Yahoo, Netaddress (usa.net), Netscape mail, AmExMail, HotVoice, Email 
and mail.com. Probably you can use other web e-mail's services, because now 
the program uses simple scripts for adjusting of the connecting to servers. 
For example you can simply make connection from the Netaddress to the AmExMail, 
which is not included in pre-defined list of services. As well program allows 
you to check any numbers of POP3 and web-based mail's accounts. After the checking 
you can review all information about the messages headers in your mailbox. If you 
expect any urgent messages, then you can indicate sender or/and the subject that 
you are expecting. When the program detects such messages on the server, it will 
notify you. Built-in scheduler may plan the checking of accounts. In addition you 
can use anti-spam filter during of the receiving of messages. When the program 
determines a spam message, it will include a expression, which you selected, into 
messages subject. Also the program can be working in System Tray and will notify 
you by sound when you have a mail. 

You can get this shareware from its homepage at any of the followed sites:

http://www.geocities.com/SiliconValley/Way/3796/rel/ 
http://members.xoom.com/pop3con/
http://server25.hypermart.net/pop3con/

This software is a shareware, you can use it within 15 days, after that, you have
to register it. Otherwise all your setting can not be loaded each time you run it.

Let's try to find the register key using the famous tool: SoftICE

First, run it and goto Help manu select Registration. It will display a register
dialog, the Product ID is calculated from your PC, each PC has the defferent ID,
and you can not change it. that's why you can not use my number to register yours.
Enter the information it needs:

Product ID: 3CDC44BAD4A096EC  <---- automatically generated by program
User name: Winter Lee         <---- your name
User e-mail: winterl@126.com  <---- your email
Product Key: 24831984         <---- fake register number whatever you like 

Press Ctrl-D to pop up SoftICE, set a breakpoint using:

bpx hmemcpy

Press F5 to go back to POP3Connector, press Register button. It will be breaked
by SoftICE, disabel the breakpoint, using F12 to go back to POP3Connector code
area, try to using F10 to trace the codes, when you see:

:004AAF74 55                      push ebp
:004AAF75 8BEC                    mov ebp, esp
:004AAF77 33C9                    xor ecx, ecx
:004AAF79 51                      push ecx
:004AAF7A 51                      push ecx
:004AAF7B 51                      push ecx
:004AAF7C 51                      push ecx
:004AAF7D 51                      push ecx
:004AAF7E 51                      push ecx
:004AAF7F 51                      push ecx
:004AAF80 53                      push ebx
:004AAF81 8BD8                    mov ebx, eax
:004AAF83 33C0                    xor eax, eax
:004AAF85 55                      push ebp
:004AAF86 680AB14A00              push 004AB10A
:004AAF8B 64FF30                  push dword ptr fs:[eax]
:004AAF8E 648920                  mov dword ptr fs:[eax], esp
:004AAF91 8D55FC                  lea edx, dword ptr [ebp-04]
:004AAF94 8B83D4020000            mov eax, dword ptr [ebx+000002D4]
:004AAF9A E84969F8FF              call 004318E8
:004AAF9F 8D55F8                  lea edx, dword ptr [ebp-08]
:004AAFA2 8B83D8020000            mov eax, dword ptr [ebx+000002D8]
:004AAFA8 E83B69F8FF              call 004318E8
:004AAFAD 8D45F0                  lea eax, dword ptr [ebp-10]
:004AAFB0 50                      push eax
:004AAFB1 8B4DF8                  mov ecx, dword ptr [ebp-08] <-- the fake key you entered
:004AAFB4 8B55FC                  mov edx, dword ptr [ebp-04] <-- the email you entered
:004AAFB7 8BC3                    mov eax, ebx
:004AAFB9 E81EFEFFFF              call 004AADDC  <-- should be the key genteration call
:004AAFBE 8B45F0                  mov eax, dword ptr [ebp-10]  <-- the real key number
:004AAFC1 8B55F8                  mov edx, dword ptr [ebp-08]  <-- the fake key number
:004AAFC4 E8278FF5FF              call 00403EF0  <-- should be compare procedure
:004AAFC9 0F85F5000000            jne 004AB0C4   <-- jump to 004AB0C4 if not the same

So, before run call 00403EF0, using d eax command to get the real product key.

Go back to POP3connector re-register it just replace the fake product key with the real
one. You will register successfully.

You can go into the 004AADDC call to find how it genterate product key if you can, then
you may be write a KeyGenerater for it :)

**************************************************************
Cracked by Winter Lee @ 07/20/00
winterl@126.com http://member.netease.com/~winterl
**************************************************************