SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING TempClean v3.0 A Cracking Tutorial by ASTAGA [D4C/C4A/WTF] DISCLAIMER This reading material is not intended to violate Copyrights and/or it is law, but educational purposes only. I hold no responsibility ( by all means and in any shape whatsoever ) of the mis-used of this material. Read END NOTES section at the end of this file. ABOUT THE PROGRAM In Windows 9x/NT many programs use temporary files which often stay after program shutdown. Because of that Windows grows while hard disk space decreases and overall system performance are slowing or even your system may crash due to the lack of space for your swap file. TempClean cleans temporary directories or search for tempo rary files across your hard disk so there is no need for you to think about trash that can fill up your disk. You can easy add WINDOWS/TEMP, Internet cache, Document history or any other directories you want and let TempClean clean them on every Windows start so you don't have to think about it. WHRERE TO DOWNLOAD Author : Milan Jaukovic Copyright : Milan Jaukovic. Web : http://alvilim.virtualave.net URL : Size : HOW TO GET VALID SERIAL NUMBER by using SoftIce 1. Run the program ( uh! mine is expired ) click on REGISTER button then type these below informations : Name : Pirates Order Code : 7388105090 Do not click OK button yet. 2. Load SoftIce and set HMEMCPY as your breakpoint. Click OK button, you're return back into SoftIce. Press F11,F5,F11 followed with F12 several times until you see these below snippet codes : 015F:0055E5BB E82CC9FCFF CALL 0052AEEC <== break here 015F:0055E5C0 8B4DF8 MOV ECX,[EBP-08] 015F:0055E5C3 8B55FC MOV EDX,[EBP-04] ==> d ecx 015F:0055E5C6 8BC3 MOV EAX,EBX ==> d edx 015F:0055E5C8 E8F3000000 CALL 0055E6C0 !!!!!! 015F:0055E5CD 84C0 TEST AL,AL 015F:0055E5CF 7419 JZ 0055E5EA ... ... _________________ TEMPCLEAN!CODE+0005D5B5 _______________ : BC * [enter] : bpx 015F:0055E5BB [enter] Break due to BPX #015F:0055E5BB Press F10 2 times - stop at 015F:0055E5C3 - display ECX register : : d ecx [enter] ==> your fake number appear at vrtual address 0167:00DD5FB0. Press F10 once - stop at 015F:0055E5C6 - display EDX register : : d edx [enter] ==> your name appear at vrtual address 0167:00DD5F94 along with fake codes. Press again F10 right after you passed CALL function at 015F: 0055E5C8 look at the Data Window - did you see an interesting characters at virtual address 0167:00DD5FE4 ?? in my PC they are looks like as follow : 0167:00DD5F94 61726950...73690072 Pirates Order.is 0167:00DD5FA4 0000001A...38383337 ............7388 0167:00DD5FB4 30353031...00DD3070 105090.yt.V.p0.. 0167:00DD5FC4 00002040...00DD5FCC @ ..P.30._..._.. 0167:00DD5FD4 00000018...00000028 ....15304455(... 0167:00DD5FE4 0000001B...31334354 ............TC31 0167:00DD5FF4 30503335...00DD3070 53P044.rt.V.p0.. Write down TC3153P044 as your potential reg. code. ( Note : I recommended you to try your fake code in 8 or 12 characters length, and see whappen in the Data Window ) 3. Disable all breakpoints by typing BC * [enter] Press F5 or X to return to the main program 4. Repeat registration procedure and keyed-in TC3153P044 as your S/N. Click OK button ..... you're registered. 5. Where the hell is my registration code is stored ?? The correct registration code is stored in the registry as follows : REGEDIT4 [HKEY_LOCAL_MACHINE\Software\Alvilim\TempClean] "RegName"="Pirates Order" "RegKey"="TC3153P044" "Temp"=dword:00000000 6. How can I practise with my own user name ? - I strongly recommended you not to do this ! E N D N O T E S Distributing your serial number is illegal and is no different than distributing illegal copies of the registered software. Violation of this rule may result in temporary or permanent revocation of this license and cancellation of the serial number; the original licensee will also be held responsible for damages, physical and estimated. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > Never attribute to malice that which is adequately explained by stupidity ASTAGA [D4C/C4A] tute-tempclean30.zip [EOF] 12/3/00 10:38:29 AM "SplitHeight"="168"