How to find the real serial
Protector Plus 2000 version7.0A11
a Cracking tutorial By Nemesis] TNT
DISCLAIMER
This reading material is not intended to violate Copyrights
and/or it is law, but educational purposes only. I hold no
responsibility ( by all means and in any shape whatsoever )
of the mis-used of this material.
About The Program
Anti-virus Software for Windows 95/98
WHERE TO DOWNLOAD
Homepage :http://www.protectorplus.com
Size : 2.05mb
Tool: numega Softice 4.5 [can be download at http://www.nemesis.2itb.com
HOW TO GET VALID SERIAL NUMBER for your name By Using [Softice]
lets get started run Protector Plus 2000 now enter your name and fake serial click register button message box say Invaild Key ! Blah Blah heheh ok now do this ctrl D bring softice , now we should put breakpoint like this bpx hmemcpy and enter press F5 to get out off softice, type your fake serial in the edit click register now you are back in softice, now lets search for real serial ;-) ok press F5 1 time F12 9 times until we land at this address below, now press F10 to go down .
* Reference To: USER32.GetDlgItemTextA, Ord:0104h
|
:00496ABA FF1588244B00 Call dword ptr [004B2488]
:00496AC0 EB10 jmp 00496AD2 <--- we land here this jump take you here 00496AD2
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00496AAC(C)
:00496AC2 FF7510 push [ebp+10]
:00496AC5 8B10 mov edx, dword ptr [eax]
:00496AC7 8BC8 mov ecx, eax
:00496AC9 FF750C push [ebp+0C]
:00496ACC FF7508 push [ebp+08]
:00496ACF FF5278 call [edx+78]
<--- this take you back to this address 00456CA7
:00456CA7 8D94249C000000 lea edx, dword ptr [esp+0000009C]
:00456CAE 8D442410 lea eax, dword ptr [esp+10]
:00456CB2 52 push edx
:00456CB3 8D4C2458 lea ecx, dword ptr [esp+58]
:00456CB7 50 push eax
:00456CB8 51 push ecx
:00456CB9 E8D2430200 call 0047B090
:00456CBE 83C40C add esp, 0000000C
:00456CC1 85C0 test eax, eax
:00456CC3 0F8459010000 je 00456E22
from here scroll down until you see the address below.
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00496AC0(U)
:00496AD2 5D pop ebp <------type d edx for real serial
:00496AD3 C20C00 ret 000C
now remember the serial you have fond enter it and is registered !
easy or ??? the program is registered ;-) hope you find it useful ?
END NOTES
Special Thanks go to All [TNT MEMBERS] Keep it Real guys.
Nemesis]