SERIAL NUMBER IS FISHY - DECLINE PATCH'ITCH'ING SuperCleaner 1.6 A Cracking Tutorial by ASTAGA [D4C/C4A] DISCLAIMER This reading material is not intended to violate Copyrights and/or it is law, but educational purposes only. I hold no responsibility ( by all means and in any shape whatsoever ) of the mis-used of this material. READ End Notes in the below section of this material. ABOUT THE PROGRAM SuperCleaner is a fast, powerful, and easy to use program designed to clean out the garbage from your computer and protect your privacy, both on and off the Internet. Here are some of its features: - Scans your entire computer for unneeded and obsolete files - Gives you the option to selectively remove any obsolete files found - Cleans out your Start Menu of dead links - Protects your privacy on the Internet by removing temporary Internet files, typed URLs, history files, and cookies - Includes an easy to use Cookie Manager that protects your personal information from websites - Can be configured to perform numerous operations when your computer starts up, such as wiping all Internet browsing information, alphabe tizing your Start Menu, removing selected cookies, emptying your Recycle Bin, and cleaning out your Windows temp directory WHERE TO DOWNLOAD Author : Leif Larsson & Johan Lundberg Copyright : Firas El-Hasan - SC Homepage : http://www.FirasE.com URL : Size : HOW TO GET VALID SERIAL NUMBER by using SoftIce 1. Run AUTOSHUTDOWN.EXE, click on the REGISTRATION tab, , in the registration dialog box type these below informations : Name : RED RACKHAM Code : 7388105099 Do not click OK button yet You have noticed that the OK button was grayed, so let the cursor remain in the Reg Code field box . Do not click OK button yet 2. Load SoftIce by pressing [ CTRL + D ], set a breakpoint as follow : BPX GetDlgItemTextA [enter] and F5 to return to the main program 3. Now press OK button ... you'll return back into SoftIce! In within SoftIce press F11, F5, F11, then you'll break and see these below codes : __________________________________________________________________ 015F:00407BFA FF1564324100 CALL [USER32!GetDlgItemTextA] 015F:00407C00 8D8500FEFFFF LEA EAX,[EBP-0200] 015F:00407C06 50 PUSH EAX ==> d eax 015F:00407C07 8D8D00FFFFFF LEA ECX,[EBP-0100] 015F:00407C0D 51 PUSH ECX ==> d ecx 015F:00407C0E E80D040000 CALL 00408020 ==> F8 015F:00407C13 83C408 ADD ESP ____________________ SUPERCLEANER!.text+6BFA _________________ Break due to BPX USER32!GetDlgItemTextA Press F10 2 times - stop at 015F:00407C06 - display EAX register : : d eax [enter] ==> your fake code appear at virtual address 0167:0065EEDC . Press F10 2 times - stop at 015F:00407C0D - display ECX register : : d ecx [enter] ==> your user name appear at virtual address 0167:0065EFDC. Press F8 at 015F:00407C0E and follow this call instruction. 4. Soon after you pressed F8, you'll see these below snippet codes : 015F:0040801F CC INT 3 015F:00408020 55 PUSH EBP ==> break here 015F:00408021 8BEC MOV EBP,ESP 015F:00408023 81EC04010000 SUB ESP,00000104 015F:00408029 57 PUSH EDI 015F:0040802A C745FC00000000 MOV DWORD PTR [EBP-04],00000000 015F:00408031 8D85FCFEFFFF LEA EAX,[EBP-0104] 015F:00408037 50 PUSH EAX 015F:00408038 8B4D08 MOV ECX,[EBP+08] 015F:0040803B 51 PUSH ECX 015F:0040803C E8BF000000 CALL 00408100 015F:00408041 83C408 ADD ESP,08 ==> d eax ... ... ____________________ SUPERCLEANER!.text+701F ____________________ Keep continue pressing F10, did you feel a splash on your screen when you just passed CALL instruction at 015F:0040803C ??? Stop at 015F:00408041 and take a look at Data Window, did you see 1428-52520-1142-14140 at 0167:0065ECBC ?? ( If not, just display EAX register ) Write it down this potential reg code. 5. Disable all breakpoints as follow : BD * [enter] Press F5 or X to return to the main program 6. Repeat registration procedure and keyed-in 1428-52520-1142-14140 as your S/N . If I had no mistaken there is no " Thank you for registration " message, click on the top left checkbox, click HELP/ABOUT sub menu ..... you registered ! 7. Where the hell is my registration code is stored ?? The correct registration code is stored in the registry as follows : REGEDIT4 [HKEY_CURRENT_USER\Software\SuperCleaner\Registration] "Name"="Red Rackham" "Code"="1428-52520-1142-14140" 8. How can I practise with my own user name ? - I strongly recommended you not to do this ! E N D N O T E S Distributing your serial number is illegal and is no different than distributing illegal copies of the registered software. Violation of this rule may result in temporary or permanent revocation of this license and cancellation of the serial number; the original licensee will also be held responsible for damages, physical and estimated. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > Never attribute to malice that which is adequately explained by stupidity ASTAGA [D4C/C4A] tute-supercleaner16.zip [EOF] 12/5/00 8:38:57 PM