SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING
Directory Compare 1.5
A Cracking Tutorial
by ASTAGA [D4C/C4A]
DISCLAIMER
This reading material is not intended to violate Copyrights
and/or it is law, but educational purposes only. I hold no
responsibility ( by all means and in any shape whatsoever )
of the mis-used of this material.
Read END NOTES section at the end of this file.
ABOUT THE PROGRAM
Directory Compare provides a comparison of the contents of
two directories and the ability to synchronize the directo
ries. It includes the following capabilities: Compare the
contents of two directories Copy and move files between
the directories or to any other directory Delete or rename
files and directories Open files in their associated appli
cation Synchronize the contents of the directories
Get information on the files in the selected directories
Print listings of the directories or export them to comma-
delimited files Files in the selected directories are lis
ted in two side-by-side grids. You can choose various dis
play filters to limit the listing to files existing in both
, files which exist in one directory only, or files in both
directories with a different size or date/time. Once display
ed, files can be easily selected either individually or in
groups and then copied, moved or deleted.
WHERE TO DOWNLOAD
Author : Glenn Alcott
Copyright : GLENN ALCOTT SOFTWARE
Homepage : http://www.galcott.com/default.htm
URL : http://www.galcott.com/dc.htm
http://www.galcott.com/dircmp15.zip
Size : 510 kb as of Dcember 17,2000
Rel Date : July 2000
HOW TO GET VALID SERIAL NUMBER by using SoftIce
1. Run DIRCOMP.EXE, in the registration dialog box type these below
informations :
Code : 73881050
Do not click OK button yet
2. Load SoftIce by pressing [ CTRL + D ], set a breakpoint as follow :
BPX messageboxa [enter] and
F5 to return to the main program
3. Now, click OK button... you'll return back into SoftIce!
In within SoftIce press F11, confirm OK when beggar-off
message pops-up. Next, you'll returned back again into
SoftICe and break at USER32!MessageBoxA .
Scroll up around 4-5 times ( Ctrl+PgUp ) until you see CALL
instruction at 015F:00481B9F. I told you this is a shortcut.
Now, do these below followings :
: bd 00 [enter] ==> no longer needed
: bpx 015F:00481B9F [enter]
Press X to let SoftIce break into new location
( Press OK button in the registration dialog box if
necessary ).
5. If nothing goes wrong you'll break again at these below
snippet codes :
___________________________________________________________________
015F:00481B9F E8641AFAFF CALL 00423608 <==break here
015F:00481BA4 8B45F8 MOV EAX,[EBP-08]
015F:00481BA7 8D55FC LEA EDX,[EBP-04] ==> D EAX
015F:00481BAA E8A15CF8FF CALL 00407850
015F:00481BAF 8B45FC MOV EAX,[EBP-04]
015F:00481BB2 50 PUSH EAX ==> d eax
015F:00481BB3 8D55F4 LEA EDX,[EBP-0C]
015F:00481BB6 B87FAD7D00 MOV EAX,007DAD7F
015F:00481BBB E8105EF8FF CALL 004079D0
015F:00481BC0 8B55F4 MOV EDX,[EBP-0C]
015F:00481BC3 58 POP EAX ==> d edx
015F:00481BC4 E81721F8FF CALL 00403CE0
015F:00481BC9 0F8568010000 JNZ 00481D37
_________________________ DIRCOMP!CODE+00080B99 ___________________
Break due to BPX #015F:00481B9F
Press F10 2 times - stop at 015F:00481BA7 - display EAX register
:d eax [enter] ==> your fake code appear in the Data Window
at virtual address 0167:00C1F4D4 .
Press F10 3 times - stop at 015F:00481BB2 - display EAX register
:d eax [enter] ==> again your fake code appear at 0167:00C1F4EC
and two lines below there is 8236415 which
looks like suspicious.
Write down this suspicious number.
Press F10 5 times - stop at 015F:00481BC3 - display EDX register
:d edx [enter] ==> there is 8236415 again appear at
0167:00C1F504
You can continue tracing later on you'll see your fake code
load into ECX register ( in reverse order ) and real code
which also in reverse order until further you step passed JNZ
instruction "beggar-off" message.
7. Disable all breakpoints by typing
BD * [enter]
Press F5 or X to return to the main program
8. Repeat registration procedure and keyed-in 8236415 as
your S/N.
Click OK button ..... there you're registered.
9. Where the hell is my registration code is stored ??
The correct registration code is stored in the registry as
follows :
REGEDIT4
10. How can I practise with my own user name ?
- I strongly recommended you not to do this !
E N D N O T E S
Distributing your serial number is illegal and is no
different than distributing illegal
copies of the registered
software. Violation of
this rule may
result in
temporary or permanent revocation of this
license and cancellation of the
serial number;
the original licensee
will also be held responsible for
damages, physical and estimated.
Do not distribute your crack release based on this tutorial, because
you become a LAMER(s)!!!!!!!!
( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
personal computer, using Hex Editor, ripping off other group(s)
crack release, repacking (distro) them under his name.
Adopted from newsgroup alt.cracks, alt.crackers - February 1997 )
More about LAMER(s):
lamer /n./ [prob. originated in skateboarder slang]
Synonym for luser, not used much by hackers but common among warez
d00dz, crackers, and phreakers. Oppose elite. Has the same connota
tions of self-conscious elitism that use of luser does among
hackers.
< SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >
Never attribute to malice that which is adequately
explained by stupidity
ASTAGA [D4C/C4A] tute-dircompare15.zip
[EOF] 12/17/00 6:08:55 PMthe hell is my registration code is stored ??