SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING.
Close Popup 4.0
A Cracking Tutorial
by ASTAGA [D4C/C4A]
DISCLAIMER
This reading material is not intended to violate Copyrights
and/or it is law, but educational purposes only. I hold no
responsibility ( by all means and in any shape whatsoever )
of the mis-used of this material.
ABOUT THE PROGRAM
RegSpanner – a Windows 98 tweaking utility. With RegSpanner it is
possible to customise your Windows 98 user interface.
You can:
· Remove unwanted items from the Start Menu, Desktop, Control Panel
etc.
· Fine tune many aspects of the system performance
· Add extra functionality to menus
· Restrict access to certain parts of the computer
· Speed up Dial-up Internet connections (beta)
· …..plus many other enhancements
In this release of RegSpanner there are over 100 different things
you can customise. In future versions I am hoping to add a great
deal more features to further enhance the Windows 98 operating
system. A Windows NT version will also be available and hopefully
support for Windows 2000 and Windows ME. Most features will work
with Windows 95, but some options are Windows 98 dependen
WHERE TO DOWNLOAD
Author : Ryan Martinsen
Copyright : Take a Hike Software.
Homepage : http://www.homeonthewww.com/ryan/
URL : http://www.hotwww.com/ryan/close_popup4.zip
Size : KB as of ,2000
HOW TO GET VALID SERIAL NUMBER by using SoftIce
This is a Visual Basic 6 based program. Before you apply this
tutorial you better edit your WINICE.DAT and enable MSVBVM60.DLL
export statement accordingly.
At least your WINICE.DAT should be looked as follow :
EXP=c:\windows\system\msvbvm50.dll
EXP=c:\windows\system\msvbvm60.dll
In some cases enabling these two statements will confused Soft
Ice, so, use them thoroughly.
Please take my note, this tute is not to generalize that cracking
VB application is easy - there are lot of program can be cracked
not by this way . ( By coincidence ClosePop Up is the simple one )
1. Run CLOSE POPUP.EXE, click REGISTER tab , in the
registration dialog box type these below informations :
User name : Pirates Order
Reg Code : 98032749807
Do not click OK button yet
2. Fire up SoftIce by pressing [ CTRL + D ], set a breakpoint as
follow :
bpx __vbastrcat [enter]
bpx __vbastrmove [enter]
Press X or F5 to return to the main program
3. Now it's time to click OK button... you'll return back into SoftIce!
In within SoftIce press F11, F5, F11 once until you see these below
snippet codes :
______________________________________________________________
015F:00410AAE FFD6 CALL ESI <== break here
015F:00410AB0 8B55E8 MOV EDX,[EBP-18] ==> d eax
015F:00410AB3 8D4DE0 LEA ECX,[EBP-20]
015F:00410AB6 895DE8 MOV [EBP-18],EBX
_____________________CLOSE POPUP!.text+FAAE___________________
Break due to BPX MSVBVM50!__vbaStrMove
Break due to G
Press F10 once and display EAX register :
: d eax [enter] ==> your name, fake and real code appear in the
Data Window's virtual address 0167:00422574.
Your valid reg code is at 0167:00422594 upto
0167:004225B4 .
Remember they're in wide format and looks
like as follow :
EAX=00422574 EBX=00000000 ............. ESI=7B30F8DA
EDI=005205B4 EBP=0064ED50 ............. o d I s Z a P c
CS=015F DS=0167 SS=0167 ..GS=0000 SS:0064ED38=00422518
----------------------------------dword-------------PROT---(0)--
0167:00422574 00380039...00390034 9.8.0.3.2.7.4.9. <== fake
0167:00422584 00300038...A0000044 8.0.7...r...D...
0167:00422594 00000022...005E0045 "...1.6.5.5.E.^. <== your
0167:004225A4 00560067...00670044 g.V.i.Z.h.`.D.g. <== real
0167:004225B4 005A0059...00690061 Y.Z.g...A.g.a.i. <== S/N
0167:004225C4 0000006E...0000FFFF n........?......
0167:004225D4 A0000044...00720072 D.......S.o.r.r.
0167:004225E4 002C0079...00730061 y.,. .P.l.e.a.s.
0167:004225F4 00200065...00670041 e. .T.r.y. .A.g.
0167:00422604 00690061...00000000 a.i.n...........
If you failed getting this figure, don't be panic, just press X
or F5 key followed with F11 and repeat step#3 above.
Repeat them several times if necessary.
4. Disable all breakpoints by typing
BD * [enter]
Press F5 or X to return to the main program
5. Repeat registration procedure and keyed-in 1655E^gViZh`DgYZg
( case sensitive ) as your S/N .
Click OK/REGISTER button ..... ouchh! the screen splash and
classic message " thank you .... " .
6. Where the hell is my registration code is stored ??
The correct registration code is stored in the registry as
follows :
REGEDIT4
[HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Take
a Hike Software\Close Popup]
"User"="Pirates Order"
"Code"="1655E^gViZh`DgYZg"
"Version"="4.0"
"Netscape"="True"
"Netscape 3"="True"
"Internet Explorer"="True"
7. How can I practise with my own reg. key ?
- I strongly recommended you not to do this !
END NOTES
Do not distribute your crack release based on this tutorial, because
you become a LAMER(s)!!!!!!!!
( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
personal computer, using Hex Editor, ripping off other group(s)
crack release, repacking (distro) them under his name.
Adopted from newsgroup alt.cracks, alt.crackers - February 1997 )
More about LAMER(s):
lamer /n./ [prob. originated in skateboarder slang]
Synonym for luser, not used much by hackers but common among warez
d00dz, crackers, and phreakers. Oppose elite. Has the same connota
tions of self-conscious elitism that use of luser does among
hackers.
< SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >
Never attribute to malice that which is adequately
explained by stupidity
ASTAGA [D4C/C4A] tute-closepopup40.zip
[EOF] 11/12/00 5:33:03 PM