SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING FontLook 3.5 A Cracking Tutorial by ASTAGA [D4C/C4A] DISCLAIMER This reading material is not intended to violate Copyrights and/or it is law, but educational purposes only. I hold no responsibility ( by all means and in any shape whatsoever ) of the mis-used of this material. Read END NOTES section at the end of this file. ABOUT THE PROGRAM FontLook is a utility to display and print samples of your Windows fonts, and to preview or install fonts from CD-ROMs or other sources. Screen displays include samples at select able sizes and character maps. Print samples include: Sample Text: Three lines for each font, as many fonts as will fit on each page, at the point size of your choice. Character Charts: A full-page chart for each font, showing each character and its ASCII code number. Full Page Sample: Includes one-line samples at sizes from 8 to 60 points, three-line samples including regular, bold, italic and bold italic; all extended characters. Text Paragraphs: A para graph printed at user-selectable sizes from 7 to 14 points, one page per font. WHERE TO DOWNLOAD Author : Glenn Alcott Copyright : GLENN ALCOTT SOFTWARE Homepage : http://www.galcott.com/default.htm URL : http://www.galcott.com/fl.htm http://www.galcott.com/fontlk35.zip Size : 400 KB as of Dcember 17,2000 Rel Date : July 2000 HOW TO GET VALID SERIAL NUMBER by using SoftIce 1. Run FONTLOOK.EXE, in the registration dialog box type these below informations : Code : 73881050 Do not click OK button yet 2. Load SoftIce by pressing [ CTRL + D ], set a breakpoint as follow : BPX messageboxa [enter] and F5 to return to the main program 3. Now, click OK button... you'll return back into SoftIce! In within SoftIce press F11, confirm OK when beggar-off message pops-up. Next, you'll returned back again into SoftICe and break at USER32!MessageBoxA . Scroll up around 4-5 times ( Ctrl+PgUp ) until you see CALL instruction at 015F:00450268. I told you this is a shortcut. Now, do these below followings : : bd 00 [enter] ==> no longer needed : bpx 015F:00450268 [enter] Press X to let SoftIce break into new location ( Press OK button in the registration dialog box if necessary ). 5. If nothing goes wrong you'll break again at these below snippet codes : ___________________________________________________________________ 015F:00450268 E87FD6FCFF CALL 0041D8EC <==break here 015F:0045026D 8B45F4 MOV EAX,[EBP-0C] 015F:00450270 8D55F8 LEA EDX,[EBP-08] 015F:00450273 E8746EFBFF CALL 004070EC 015F:00450278 8B45F8 MOV EAX,[EBP-08] 015F:0045027B 8D55FC LEA EDX,[EBP-04] 015F:0045027E E8C96CFBFF CALL 00406F4C 015F:00450283 8B45FC MOV EAX,[EBP-04] 015F:00450286 50 PUSH EAX 015F:00450287 8D55F8 LEA EDX,[EBP-08] 015F:0045028A B82D1E5300 MOV EAX,00531E2D 015F:0045028F E8D86FFBFF CALL 0040726C 015F:00450294 8B55F8 MOV EDX,[EBP-08] 015F:00450297 58 POP EAX ====> D EDX 015F:00450298 E80B3AFBFF CALL 00403CA8 015F:0045029D 0F85DC000000 JNZ 0045037F _________________________ FONTLOOK!CODE+0004F268 ___________________ Break due to BPX #015F:00450268 Press F10 2 times - stop at 015F:00450270 - display EAX register :d eax [enter] ==> your fake code appear in the Data Window at virtual address 0167:00BE1584 . Press F10 3 times - stop at 015F:0045027B - display EAX register :d eax [enter] ==> again your fake code appear at 0167:00BE3A04 Press F10 8 times - stop at 015F:00450297 - display EDX register :d edx [enter] ==> there is 5447213 again appear at 0167:00BE15F4. Write this suspicious number. You can continue tracing later on you'll see your fake code load into ECX register ( in reverse order ) and real code which also in reverse order until further you step passed JNZ instruction "beggar-off" message. 7. Disable all breakpoints by typing BD * [enter] Press F5 or X to return to the main program 8. Repeat registration procedure and keyed-in 5447213 as your S/N. Click OK button ..... there you're registered. 9. Where the hell is my registration code is stored ?? The correct registration code is stored in the registry as follows : REGEDIT4 10. How can I practise with my own user name ? - I strongly recommended you not to do this ! E N D N O T E S Distributing your serial number is illegal and is no different than distributing illegal copies of the registered software. Violation of this rule may result in temporary or permanent revocation of this license and cancellation of the serial number; the original licensee will also be held responsible for damages, physical and estimated. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > Never attribute to malice that which is adequately explained by stupidity ASTAGA [D4C/C4A] tute-fontlook35.zip [EOF] 12/17/00 6:08:55 PMare of what did you get from 015F:0048742E