SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING


TempClean v3.0 
A Cracking Tutorial
by ASTAGA [D4C/C4A/WTF]


DISCLAIMER 

This reading material is not intended to violate Copyrights 
and/or it is law, but educational purposes only. I hold no 
responsibility ( by all means and in any shape whatsoever ) 
of the mis-used of this material.
Read END NOTES section at the end of this file.


ABOUT THE PROGRAM

In Windows 9x/NT many programs use temporary files which 
often stay after program shutdown. Because of that Windows 
grows while hard disk space decreases and overall system 
performance are slowing or even your system may crash due 
to the lack of space for your swap file.

TempClean cleans temporary directories or search for tempo
rary files across your hard disk so there is no need for 
you to think about trash that can fill up your disk. You 
can easy add WINDOWS/TEMP, Internet cache, Document history 
or any other directories you want and let TempClean clean 
them on every Windows start so you don't have to think 
about it.


WHRERE TO DOWNLOAD


Author    : Milan Jaukovic
Copyright : Milan Jaukovic.
Web       : http://alvilim.virtualave.net
URL       : 	     
Size      : 



HOW TO GET VALID SERIAL NUMBER by using SoftIce


1.  Run the program ( uh! mine is expired ) click on 
    REGISTER button then type these below informations :

	Name	: Pirates Order
	Code	: 7388105090

    Do not click OK button yet.


2.  Load SoftIce and set HMEMCPY as your breakpoint.
    Click OK button, you're return back into SoftIce.
    Press F11,F5,F11 followed with F12 several times
    until you see these below snippet codes :

	015F:0055E5BB  E82CC9FCFF   CALL  0052AEEC <== break here
	015F:0055E5C0  8B4DF8       MOV   ECX,[EBP-08]                       
	015F:0055E5C3  8B55FC       MOV   EDX,[EBP-04] ==> d ecx
	015F:0055E5C6  8BC3         MOV   EAX,EBX ==> d edx                           
	015F:0055E5C8  E8F3000000   CALL  0055E6C0 !!!!!!                          
	015F:0055E5CD  84C0         TEST  AL,AL                              
	015F:0055E5CF  7419         JZ    0055E5EA                           
	...
	...
	_________________  TEMPCLEAN!CODE+0005D5B5 _______________

	: BC *  [enter]
	: bpx 015F:0055E5BB  [enter]
	Break due to BPX #015F:0055E5BB 

	Press F10 2 times - stop at 015F:0055E5C3 - display ECX register :

	: d ecx  [enter] ==> your fake number appear at vrtual address
				0167:00DD5FB0.

	Press F10 once - stop at 015F:0055E5C6 - display EDX register :

	: d edx  [enter] ==> your name appear at vrtual address
				0167:00DD5F94 along with fake codes.
 
	Press again F10 right after you passed CALL function at 015F:
	0055E5C8 look at the Data Window - did you see an interesting 
	characters at virtual address 0167:00DD5FE4 ??  in my PC they
	are looks like as follow : 

	0167:00DD5F94 61726950...73690072      Pirates Order.is
	0167:00DD5FA4 0000001A...38383337      ............7388
	0167:00DD5FB4 30353031...00DD3070      105090.yt.V.p0..
	0167:00DD5FC4 00002040...00DD5FCC      @ ..P.30._..._..
	0167:00DD5FD4 00000018...00000028      ....15304455(...
	0167:00DD5FE4 0000001B...31334354      ............TC31
	0167:00DD5FF4 30503335...00DD3070      53P044.rt.V.p0..

    Write down  TC3153P044  as your potential reg. code.
    
    ( Note : I recommended you to try your fake code in 8 or
    12 characters length, and see whappen in the Data Window	 )


3.  Disable all breakpoints by typing 

	BC *   [enter]
	Press F5 or X to return to the main program
     

4.  Repeat registration procedure and keyed-in  TC3153P044  as 
    your S/N.
    Click OK button ..... you're registered.


5.	Where the hell is my registration code is stored ??

	The correct registration code is stored in the registry as
	follows :
	REGEDIT4
	[HKEY_LOCAL_MACHINE\Software\Alvilim\TempClean]
	"RegName"="Pirates Order"
	"RegKey"="TC3153P044"
	"Temp"=dword:00000000


6.  How can I practise with my own user name ?

	-  I strongly recommended you not to do this !




					E N D   N O T E S


		Distributing your serial number is illegal and is no 
			different than distributing illegal 
				copies of the registered 
				 software. Violation of
					this rule may 
					  result in 
			temporary or permanent revocation of this
			     license and cancellation of the 
			              serial number; 
				   the original licensee
			   will also be held responsible for 
			    damages, physical and estimated.


   Do not distribute your crack release based on this tutorial, because
   you become a LAMER(s)!!!!!!!!
   ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
   personal computer, using Hex Editor, ripping off other group(s)
   crack release, repacking (distro) them under his name. 
   Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) 

    More about LAMER(s):
	lamer /n./ [prob. originated in skateboarder slang]
	Synonym for luser, not used much by hackers but common among warez 
	d00dz, crackers, and phreakers. Oppose elite. Has the same connota
	tions of self-conscious elitism that use of luser does among 
	hackers.
      < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >


 		Never attribute to malice that which is adequately 
				explained by stupidity


ASTAGA [D4C/C4A] tute-tempclean30.zip
[EOF] 12/3/00 10:38:29 AM
	"SplitHeight"="168"