WHY PATCHING WHILE SERIAL NUMBER IS FISHY TypeItIn Pro v2.1 A Cracking Tutorial by ASTAGA [D4C/C4A] ABOUT THE PROGRAM TypeItIn was created to make it easier to fill out forms on the web or any other program. Any string you need to type frequently can be assigned to a button. For example, you can create a button called 'FirstName' that will type 'Paul' wherever the cursor is in your active window. Simply put the text cursor where you want TypeItIn to type by clicking with your mouse. Then click the button in TypeItIn, and TypeItIn will type in the text assigned to that button. TypeItIn works by stuffing keys into the windows keyboard buffer, so programs can not tell the difference between a person typing and TypeItIn. You can use TypeItIn to perform any repetitive task. Use it to enter your name and address into forms, use it to create HTML pages, or to add special signatures to the end of emails. It's applications are only limited by your imagination! BACKGROUND INFORMATION Program Name: TypeItIn.exe Platforms: Windows 95/98/NT Current version: 2.1 Pro Version date: March 2000 Web site: http://www.wavget.com/typeitin.html http://www.wavget.com/typeitinpro32.exe Author : Paul P.M. Beuger HOW TO FISH SERIAL NUMBER by USING SOFTICE 1. Run the program, right click prog's icon in the traybar, choose REGISTER menu. Type these below informations : User Name = Pirates Order Reg Code = 73881050 Do not click OK button yet. 2. Load SoftIce and create a new breakpoint : bpx hmemcpy Press F5 3. Click OK button now, and you'll break in SoftIce again. Press F11, F5, F11 and press F12 several times until you see this below snippet codes. __________________________________________________________________ 015F:0044CA6A E875ECFDFF CALL 0042B6E4 015F:0044CA6F 8B55D8 MOV EDX,[EBP-28] 015F:0044CA72 8B45F8 MOV EAX,[EBP-08] ........ ........ ________________________TYPEITIN!CODE+0004BA68_____________________ This time I just wanna straight to the groin because I've been traced the code for you, just follow these below steps : : s 0 l fffffffffffffff e8 18 07 fb ff 74 0f [enter] Pattern found at 0167:00453583 (00453583) : bc * [enter] ==> clear previous breakpoint : bpx 0167:00453583 [enter] : x or F5 ==> to let SoftIce break in the new location Break due to BPX #0167:00453583 ( note : sometime you have to repeat registration procedure before you break in the new location ) 4. If nothing goes wrong you should break again in SoftIce and you'll see these below snippet codes : _________________________________________________________________ 015F:0045357E BA50374500 MOV EDX,00453750 break 015F:00453583 E81807FBFF CALL 00403CA0 <== here 015F:00453588 740F JZ 00453599 015F:0045358A 8B45F8 MOV EAX,[EBP-08] 015F:0045358D BA64374500 MOV EDX,00453764 015F:00453592 E80907FBFF CALL 00403CA0 015F:00453597 7508 JNZ 004535A1 015F:00453599 8D45F8 LEA EAX,[EBP-08] 015F:0045359C E87303FBFF CALL 00403914 015F:004535A1 8D4DF4 LEA ECX,[EBP-0C] 015F:004535A4 A108BD4500 MOV EAX,[0045BD08] 015F:004535A9 8B00 MOV EAX,[EAX] 015F:004535AB 8B55FC MOV EDX,[EBP-04] 015F:004535AE E87D230000 CALL 00455930 015F:004535B3 8B45F4 MOV EAX,[EBP-0C] 015F:004535B6 8B55F8 MOV EDX,[EBP-08] <== D EAX 015F:004535B9 E8E206FBFF CALL 00403CA0 <== D EDX ..... ..... _____________________ TYPEITIN!CODE+0005257E ____________________ Break due to BPX #0167:00453583 Press F10 14 times - stop at 015F:004535B6 - display EAX register : d eax [enter] ===> did you see HTYRHVSSFKSPIRA at 0167:00D096D8 ???. Write down this potential reg code. Disable current existing breakpoint : bd * : F5 to return to registration dialog box NOTE : ( you can also change your breakpoint to be " BPX 015F:00453583 " for further practice ) 4. Repeat registration procedures, and keyed-in HTYRHVSSFKSPIRA as your registration code. You're registered. 5. Where the hell is my registration info is stored ?? - The correct registration code is stored in the TYPEITIN.INI under these below statement : [Registration] Name=ASTAGA [D4C] Code=EXJOXNXKKBGQAAY BaseCode=36641 6. How can I practise with another registration key ? - I strongly recommended you not to do this ! END NOTES This program is sold as shareware, so you can try before you buy. This is convenient for you, saves expenses by dispensing with all that packaging, and cuts out the middle person. So it is cheap, but it is not free. If you like the program, and you will, be sure to register and pay. To keep shareware prices low, users must do the right thing: Register, pay up, and smile/grin at yourself in the mirror. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > _ Never attribute to malice that which is adequately explained by stupidity _ ASTAGA [D4C/C4A] tute-TypeItIn21.zip [EOF] 10/31/00 6:32:06 PM