WHY PATCHING WHILE SERIAL NUMBER IS FISHY


IRC Color Editor Version 1.0
A Cracking Tutorial 
by ASTAGA [D4C/C4A]


DISCLAIMER 

This reading material is not intended to violate Copyrights 
and/or it is law, but educational purposes only. I hold no 
responsibility ( by all means and in any shape whatsoever ) 
of the mis-used of this material.


ABOUT THE PROGRAM 

Like to make colorful messages for IRC? ICE makes it easy! 
Just copy a message from mIRC, Notepad, or any other program 
and paste it into ICE. Then select a foreground and background 
color and paint the message just the way you want it! You can 
also easily apply bold, underline, or reverse codes. When you 
are done, just paste it back. 




WHERE TO DOWNLOAD


Author   	: Paul P.M. Beuger
Homepage 	: http://www.wavget.com/download.html
		  http://www.wavget.com/dlice.html
URL		: http://www.wavget.com/ice32.exe
Size 		: 739 KB  as of October 30,2000


HOW TO GET VALID SERIAL NUMBER by using SoftIce



1.  Run ICE.EXE, click the globe icon in the taskbar, in the 
    registration dialog box type these below informations :

	Name	: Pirates Order
	Code   : 73881050

    Do not click OK button yet
    

2.  Fire up SoftIce by pressing [ CTRL + D ], set a breakpoint as follow :
    

	BPX hmemcpy     [enter]   and
   	F5  to return to the main program

3.  Now it's time to click OK button... you'll return back into SoftIce!
    In within SoftIce press F11,  then F12 11 times until you 
    see and break at :

	__________________________________________________________________ 

	015F:00456B6E  E82100FDFF          CALL      00426B94 <==== here
	015F:00456B73  8B55D8              MOV       EDX,[EBP-28] <= d edx
	015F:00456B76  8B45F8              MOV       EAX,[EBP-08] 
	015F:00456B79  E882CEFAFF          CALL      00403A00 
	015F:00456B7E  C645F701            MOV       BYTE PTR [EBP-09],01
	.........
	.........
	015F:00456BAC  8D45D8              LEA       EAX,[EBP-28]                       
	015F:00456BAF  E8F8CDFAFF          CALL      004039AC                           
	015F:00456BB4  8D45DC              LEA       EAX,[EBP-24] <= d edx                       
	015F:00456BB7  E8F0CDFAFF          CALL      004039AC                           
	.........
	.........
	____________________ ICE!CODE+00055B6E ______________________

	Disable / clear previous breakpoint and create the new one :

	bd*  [enter]
	BPX 015F:00456B6E  [enter]

	Press F10 then display EDX register :

	d edx  [enter]  ==> 	your fake S/N appear in the Data Window
				at virtual address 0167:00C09E60 .
	
	But wait, 5 lines below did you see   KIETDTQVZSVP  at the
	virtual address  0167:00C09EB0  ?  wasn't it looks like a
	serial number .... write it down !
	


4.  Disable all breakpoints by typing 

	BD *   [enter]
	Press F5 or X to return to the main program
     

5.  Repeat registration procedure and keyed-in KIETDTQVZSVP as your S/N 
    Click OK/REGISTER button .....  
    Simply, YOU'RE REGISTERED now... as a matter of fact it's  ILLEGAL
    REGISTRATION!!!!!


6.  Where the hell is my registration info is stored  ?

    The saved registration info is stored in the WIN.INI file under
    this below statement : 

	[files]
	eci=99876
	leci=36830
	o`ld=Qhs`udr!Nseds
	bned=JHDUEUPW[RWQ


7.  How can I practise with another registration key ?

	-  I strongly recommended you not to do this !


END NOTES

   This program is sold as shareware, so you can try before you buy.  
   This is convenient for you, saves expenses by dispensing with all 
   that packaging, and cuts out the middle person.  So it is cheap, 
   but it is not free.  
   If you like the program, and you will, be sure to register and pay.
   To keep shareware prices low,  users must do the right thing: 
   Register, pay up, and smile/grin at yourself in the mirror.

   Do not distribute your crack release based on this tutorial, because
   you become a LAMER(s)!!!!!!!!
   ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
   personal computer, using Hex Editor, ripping off other group(s)
   crack release, repacking (distro) them under his name. 
   Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) 

    More about LAMER(s):
	lamer /n./ [prob. originated in skateboarder slang]
	Synonym for luser, not used much by hackers but common among warez 
	d00dz, crackers, and phreakers. Oppose elite. Has the same connota
	tions of self-conscious elitism that use of luser does among 
	hackers.
    < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >


 _ Never attribute to malice that which is adequately explained by stupidity _


ASTAGA [D4C/C4A] tute-IRCColorEd10.zip
[EOF] 10/31/00 5:18:12 AM