-----cut here------------------------------------------------------------------------------------ How to crack NoiseKiller 1.3 (a quick method to crack - for newbies) Target: NoiseKiller 1.3 WWW: don' now precisely but is not important - read Cracker: --..__J_o_h_n_n_y__A_U_M__..-- (TNT) Protections to be removed: unregistered style Tools: Hiew, W32Dasm & Windows Commander 4.03 --------Secret infos about mondial occult govern and facts------- USA and it's strategic partners, including factions of aliens has on Earth orbit a very powerfull system of weapons (something like Star Wars) which was builded in 90% with alien technology from reptiliens (masters of dreams) and dominated species of Small Greys. This system consists in special alien lasers and guns with Ultra High Frequency which are very succesfull in shooting and throwing down the ships and UFOs of High Spiritual Galactic Confederation. This is no SF, is true. And part of energy of this system is supplyed from giant instalations from Alaska (Haarp project). Next time about this Haarp of Death. ---------- Yeah, this is a method very usefull to be learned by newbies (beginners in cracking). This quick method once learned, can be applied on many other programs. So, you don't really need the program, just pay atention to learn this... 1. Disassemble the exe -> noisek.exe (100336 bytes) with W32Dasm. 2. Now we try to register and we have an answer, in this case: "Incorrect identification key!". 3. Search after this in w32dasm with Alt-S-Enter. We found the words on a adress, this case is 1.18A2 (cause it's in Delphi). OK, what we see now? Look at the next piece of code: :0001.1888 6A08 push 0008 :0001.188A 8D4688 lea ax, [bp-78] :0001.188D 50 push ax :0001.188E 8D46A2 lea ax, [bp-5E] :0001.1891 50 push ax :0001.1892 9A68E68318 call 0001.E668 <---- WE SEE HERE THE CALL RESPONSIBLE WITH :0001.1897 83C406 add sp, 0006 SERIAL CALCULATION :0001.189A 3D0000 cmp ax, 0000 :0001.189D 7503 jne 18A2 <---- THE TRICKY JUMP (HIEW 1DFD) :0001.189F E90F00 jmp 18B1 * Referenced by a (U)nconditional or (C)onditional Jump at Address: |:0001.189D(C) | * Possible Reference to String Resource ID=32773: "Incorrect identification key !" | :0001.18A2 680580 push 8005 :0001.18A5 6A40 push 0040 As you can see, the responsible call for calculating the serial is (adress of function) 1.E668. Note aswell the conditional jump below -> 1.189D jne 18A2 (hiew 1DFD). Must be changed or noped. 4. Now let's search from begining after the adress obtained, because most of the programs have more then one serial check, maybe many. So put "1.E668" in search window and go! Bingo! We found on this program only 2 checks - first above - and the other at w32dasm adress 1.0290. See code: :0001.0284 6A08 push 0008 :0001.0286 8D8618FE lea ax, [bp+FE18] :0001.028A 50 push ax :0001.028B 8D86DCFE lea ax, [bp+FEDC] :0001.028F 50 push ax :0001.0290 9A68E67F02 call 0001.E668 <---- HERE IS CHECKING FIRST TIME :0001.0295 83C406 add sp, 0006 WHEN PROGRAM START RUNNING :0001.0298 3D0000 cmp ax, 0000 :0001.029B 7503 jne 02A0 <---- THE TRICKY JUMP (HIEW 7FB) :0001.029D E90600 jmp 02A6 * Referenced by a (U)nconditional or (C)onditional Jump at Address: |:0001.029B(C) | :0001.02A0 B80000 mov ax, 0000 :0001.02A3 E95D03 jmp 0603 We observe very fast what's happening; here is the first check when program starts, and above is the second check when serial is imputed. You also observe the conditional jump which must be changed or noped - the best! So, now you know what to do : the both jumps must be noped: put 9090, 9090 instead. Now you can put any random serial and all working just fine. You must notice that on another programs, could be more serial checks, search carefully. If you have no words for start with, put a breakpoint with Softice and identify the call responsible with serial check and search after it's adress. Another: first time search if the exe is crypted or packed (with File Info 2.30, put fi.exe in c:\windows\command and check writing in Windows Commander "fi *.*" in program subdirectory). My hope is that this lesson will prove usefull to you guys! To beginners, I mean! PS. Description of program: this is an old program which stops the motors of hdd when you need! Interesting program, but this version works only on Win 3.x. Search WEB for a new version after name if you're interested! I'll do this myself soon! ---------------- Greets: tKC, CIA, TNT (nice guys!), to all crackers, PRO or newbies, all cracker teams (keep going, we must eliberate from iudeo-masonic tirany, all must become free), we are great guys, and nice too. I love you all but be a good soul! Romanian Greets: Toate cele bune oamenilor inimosi din Romania! O sa vina si zile mai bune! Incercati sa evoluati spiritual daca vreti sa fiti fericiti! At last, but from all my heart: I love you Heavenly Father, I know you are with me all the time!!! God is pure love! Try this: www.geocities.com/john_aum Incredible infos for YOUR EYES ONLY!!! Critics, comments, anything at: johnny_aum@yahoo.com ----------------Sorry if my english is not perfect!---------------------------------------------- -----cut here------------------------------------------------------------------------------------d intresting thing