KEYGEN IS DEMON, PATCHING IS EVIL, SERIAL FISHING IS LESS ATTITUDE IrfanView ( German ) v3.25 A Cracking Tutorial by ASTAGA [WTF/TTM] ABOUT THE PROGRAM IrfanView ist ein kompakter, leicht zu bedienender Bildbetrachter. Mehr als das, Sie können außerdem Bilder direkt in IrfanView bearbeiten, um eine Vielfalt von Effekten zu erzeugen. Author: Irfan Skiljan Rel : Sep 08, 2000 http://www.irfanview.com http://softwarecenter.net/irfanview/ http://members.home.com/rsimmons/irfanview/ http://members.chello.at/irfan.skiljan/ http://stud1.tuwien.ac.at/~e9227474/ HOW TO GET VALID SERIAL NUMBER by using SoftIce 1. Run IVIEW.EXE, in the registration dialog box type these below informations : Name : The Tutorial Machine Code : 73881050 Do not click OK button yet 2. Load SoftIce by pressing [ CTRL + D ], set a breakpoint as follow : BPX messageboxa [enter] then press F5 to return to the main program 3. Click OK button now. You'll soon returned back into SoftIce. Press F11 and confirm OK button when " Ungultige REgistrierung! " appear on your screen. You'll back again in SoftIce and dropped at these below snippet codes : 015F:004457ED FF156CA34A00 CALL [USER32!MessageBoxA] 015F:004457F3 33C0 XOR EAX,EAX <== break here 015F:004457F5 5F POP EDI .... ________________ I_VIEW32G!.text+000447ED __________________ Break due to BPX USER32!MessageBoxA Do not trace the code yet. While stay at 015F:004457F3, scroll up ( CTRL+Up ) 10 lines above. Did you see CALL instruction at 015F:004457C9 ?? Disable and create new breakp[oint : : bd * [enter] : bpx 015F:004457C9 [enter] Press X or F5 to return to main window NOTE : Repeat registration procedure like in step #1 4. If nothing goes wrong you'll see these below snippet codes : 015F:004457C9 E8A23EFEFF CALL 00429670 015F:004457CE 83C408 ADD ESP,08^ 015F:004457D1 85C0 TEST EAX,EAX 015F:004457D3 752D JNZ 00445802 015F:004457D5 8B0D5CCF4C00 MOV ECX,[004CCF5C] 015F:004457DB 8B1540F84D00 MOV EDX,[004DF840] 015F:004457E1 6830200000 PUSH 00002030 015F:004457E6 6880094E00 PUSH 004E0980 015F:004457EB 51 PUSH ECX 015F:004457EC 52 PUSH EDX 015F:004457ED FF156CA34A00 CALL [USER32!MessageBoxA] 015F:004457F3 33C0 XOR EAX,EAX __________________ I_VIEW32G!.text+000447C9 _______________ Break due to BPX #015F:004457C9 Press F10 once - stop at 015F:004457CE - dump EDX register : D EDX [enter] ==> did you see 972928400 at virtual address 0167:0073C614 ? Write it down ! 5. Let's register the program. Keyeed-in 972928400 as your S/N ... there you're registered. END NOTES DON'T BE A LAMER BY DISTRIBUTING YOUR CRACK RELEASE BASED ON THIS TUTORIAL. ============== D I S C L A I M E R ============= THIS PAPER IS NOT INTENTED TO VIOLATE COPYRIGHTS LAW BUT EDUCATIONAL PURPOSES ONLY. I HOLD NO RES PONSIBILITY ( IN ANY SHAPE WHATSOEVER ) OF THE MIS-USE OF THIS MATERIAL. NO PARTS OF THIS PAPER IS SOLD/RENT FOR COMMERCIAL NOR PERSONAL BENEFIT. [EOF] ASTAGA [TTM] - tute-iview325g.zip Tutorial Free Version C 12/5/00 8:33:40 AM