SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING


NetMapper v1.0
A Cracking Tutorial 
by ASTAGA [WTF/TTM]


DISCLAIMER 

This reading material is not intended to violate Copyrights 
and/or it is law, but educational purposes only. I hold no 
responsibility ( by all means and in any shape whatsoever ) 
of the mis-used of this material.
Read END NOTES section at the end of this file.



ABOUT THE PROGRAM 

 

NetMapper is designed to be a revolutionary tool for web site 
developers whom want to map their site. This can produce quick, 
easy to navigate pages that will give the page visitor a pain
less method to go directly to whatever they are looking for, 
as well as to expose other areas the user might never have 
known to existed. In addition to that, it is also a helpful 
tool for mapping other's sites for personal use so you can 
jump directly to wherever you wish to go, all from a local 
HTML copy of their site. It is also a vital tool for web site 
developers because it provides a fast and easy way to track down 
stray links, identify layout errors, or just quickly view their 
entire site. It is designed to be fast, flexible, and easy to 
use, with a relatively low learning curve. The extents of what 
this program can map is limited only by your system's resources.




WHERE TO DOWNLOAD


Author   	: John O' Rorke
 Copyright	: Bubonic Software 
Homepage 	: http://www.starfighter.net/bubonic/
URL		: http://www.starfighter.net/bubonic/programs/
		  sitemap/setup.exe
Size 		: 221 KB  as of January 15,2001
Rel Date	: June 12,1999



HOW TO GET VALID SERIAL NUMBER by using SoftIce


I like the way Mr John O'Rorke ( the Author ) jokes to 
fool anyone who tries to reverse his program,  if you 
have been cracked his Password Assistant v1.5 ( mine 
is in tKC's tute pack c_tkc86.zip - June 11,2000 ), 
you'll find similar unique registration.  
Open up NETMAP.EXE in WDASM and you'll enjoy his joke.



1.  Run NETMAP.EXE, in the registration dialog box type these 
    below informations :

	Code    : 73881050

    Do not click OK button yet
    

2.  Load SoftIce by pressing [ CTRL + D ], set a breakpoint as 
    follow :
 
	BPX GetWindowTextA  [enter] and
   	F5  to return to the main program


3.  Now, click OK button... you'll return back into SoftIce!
    In within SoftIce press F11 until you see and break at :

	______________________________________________________________

	015F:0042055B  FF1574634200   CALL  [SER32!GetWindowTextA]
	015F:00420561  8B4D10         MOV   ECX,[EBP+10] 
	015F:00420564  6AFF           PUSH  FF
	015F:00420566  E8858CFFFF     CALL  004191F0
	015F:0042056B  EB0B           JMP   00420578
	015F:0042056D  8B4510         MOV   EAX,[EBP+10]
	015F:00420570  FF30           PUSH  DWORD PTR [EAX]
	015F:00420572  56             PUSH  ESI
	015F:00420573  E8A4F4FFFF     CALL  0041FA1C
	015F:00420578  5F             POP   EDI

	_____________________ NETMAP!.text+0001F55B ___________________

	
    	Disable breakpoint and do search string as follow :

	: s 0 l ffffffffff E8 64 10 00 00 83 C4  [enter]
	Pattern found at 0167:004097A6
	: bd *  [enter]
	: bpx 0167:004097A6  [enter]	
	Press X  to let SoftIce break into this location


4.  If nothing goes wrong you'll break again at these below
    snippet codes : 

                     
	015F:004097A6  E864100000  CALL  0040A80F <== break here
	015F:004097AB  83C408      ADD   ESP,08 ==> D EDX ; D ECX
	015F:004097AE  85C0        TEST  EAX,EAX
	015F:004097B0  7530        JNZ   004097E2

	____________________ NETMAP!.text+87A5 ___________________

	Break due to BPX #015F:004097A6
	Press F10 once - stop at 004097AB - dump ECX and EDX 
	registers :                                                               

	: d ecx   did you see interesting  3365904 at virtual
		   address 0167:0042E9D8  ?  write it down!

	: d edx   your fake  73881050 at virtual address 
		   0167:00684250 


5.  Disable all breakpoints by typing 

	BD *   [enter]
	Press F5 or X to return to the main program
     

6.  Repeat registration procedure and keyed-in 3365904 as your 
    registration code. It's hard coded at hex #2E9D8 !!
    Click OK button .....  there you're registered.


7.	Where the hell is my registration code is stored ??

	The correct registration code is stored in the registry as
	follows : 
	REGEDIT4
	[HKEY_CURRENT_USER\Software\Bubonic Software\NETMAP\
	Version 1.0]
	"RegCode"="3365904"


8.  How can I practise with my own user name ?

	-  I strongly recommended you not to do this !



					E N D   N O T E S


		Distributing your serial number is illegal and is no 
			different than distributing illegal 
				copies of the registered 
				 software. Violation of
					this rule may 
					  result in 
			temporary or permanent revocation of this
			     license and cancellation of the 
			              serial number; 
				   the original licensee
			   will also be held responsible for 
			    damages, physical and estimated.


   Do not distribute your crack release based on this tutorial, because
   you become a LAMER(s)!!!!!!!!
   ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
   personal computer, using Hex Editor, ripping off other group(s)
   crack release, repacking (distro) them under his name. 
   Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) 

    More about LAMER(s):
	lamer /n./ [prob. originated in skateboarder slang]
	Synonym for luser, not used much by hackers but common among warez 
	d00dz, crackers, and phreakers. Oppose elite. Has the same connota
	tions of self-conscious elitism that use of luser does among 
	hackers.
      < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >


 		Never attribute to malice that which is adequately 
				explained by stupidity


ASTAGA [WTF/TTM/D4C/C4A] tute-netmapper10.zip
[EOF] 1/15/01 7:14:51 AM