SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING


Private Sitez 1.0
A Cracking Tutorial 
by ASTAGA [WTF/TTM]


DISCLAIMER 

This reading material is not intended to violate Copyrights 
and/or it is law, but educational purposes only. I hold no 
responsibility ( by all means and in any shape whatsoever ) 
of the mis-used of this material.
Read END NOTES section at the end of this file.



ABOUT THE PROGRAM 


Already becoming our #1 seller, Private Sitez is a premire 
internet password utility. If you are like us you have a 
lot of password and usernames lying around to various web
sites on the internet. Private SItez orgranizes those pass
words and usernames into one data repository. We know there 
are other organizers on the internet, so why should you 
purchase private sitez? Because of the features. 
Private Sitez encrypts/decrypts the data file automatically 
to prevent it from being viewed. Private Sitez has a browser 
capture function that will 'grab' the url from the website 
and automatically insert it into the program. Can't think 
of a password? No problem, Private Sitez will automatically 
generate a random password with different variables that 
you specify. And Private Sitez minimizes to your icon tray 
to stay out of the way, waiting to be activated by a mouse 
click.
Features :
Browser URL Capture 
Auto Password Generation 
Sits in Icon Tray 
Auto Encrypts Data File 
Auto Data File Backup on Exit (User Option) 


WHERE TO DOWNLOAD


Author   	: DCM Software
Copyright	: DCM Software
Homepage 	: http://www.dcmsoftware.bizland.com/products.html
		  http://www.dcmsoftware.bizland.com/private.html
URL		: http://www.dcmsoftware.bizland.com/priv10.zip
Size 		: 587 KB  as of Dec 30, 2000
Rel Date	: November 16, 2000




HOW TO GET VALID SERIAL NUMBER by using SoftIce


ItDownload your evaluation copy below.




1.  Run PRIVATE.EXE, in the registration dialog box type these 
    below informations :

	Name	 : Pirates Order
	Code    : 73881050

    Do not click OK button yet
    

2.  Load SoftIce by pressing [ CTRL + D ], set a breakpoint as 
    follow :
    
	BPX HMEMCPY  [enter]   and
   	F5  to return to the main program


3.  Now, click OK button... you'll return back into SoftIce!
    In within SoftIce press F11, F5, F11 once followed with
    pressing F12 around 6 times until you see and break at :
	______________________________________________________________

	015F:7B313640  E85991FFFF          CALL      7B30C79E <== here
	015F:7B313645  8945FC              MOV       [EBP-04],EAX
	...
	_____________________ MSVBVM50!.text+00022640  ________________

	Disable HMEMCPY and do a search string as follows :
	: bd *  [enter]
	: s 0 l ffffffffffffffff ff d0 3b fc 0f 85 2b  [enter]
	Pattern found at 0167:7B3EE7F0 (7B3EE7F0)                                       
	: bpx 0167:7B3EE7F0  [enter]
	: press X   to let SoftIce break into this location                              


4.  If you do the right thing you'll land at these below
    snippet codes :
	______________________________________________________________

	015F:7B3EE7F0  FFD0             CALL      EAX <== break HERE
	015F:7B3EE7F2  3BFC             CMP       EDI,ESP
	015F:7B3EE7F4  0F852B790000     JNZ       7B3F6125
	015F:7B3EE7FA  50               PUSH      EAX
	....
	______________________ MSVBVM50!ENGINE+17EE _______________

	Break due to BPX #0167:7B3EE7F0

    	Press F10 once - stop at 015F:7B3EE7F2 - display EAX register
	register : 

	: d eax  [enter]  	did you see 7.3.8.8.1.0.5.0. at  virtual 
				address 0167:00452D24 ???  

	Scroll up 8 lines above that fake code, did you see 
	F.D.K.8.1.S.B.2.P.A.3.W.3.J.1.6 at virtual address
	0167:00452CD4 ??
	Write it down.
	Remember they're all in wide format, and	delete prevailing 
	dot sign (.) in each character when keyed-in this potential
	reg code.



4.  Disable all breakpoints by typing 

	BD *   [enter]
	Press F5 or X to return to the main program
     

5.  Repeat registration procedure and keyed-in FDK81SB2PA3W3J16
    as your S/N. 
    Click OK button .....  there you're registered.


6.	Where the hell is my registration code is stored ??

	The correct registration code is stored in the registry as
	follows : 
	REGEDIT4
	[HKEY_CURRENT_USER\Software\VB and VBA Program Settings\
	Private Sitez Build 	11001\Install]
	"Registered User"="Pirates Order"
	"Installation Date"="02<330"
	"Nr of Times operated"="/"
	"Registration Number"="EGO<4RA5TE6V2M5:"
	"Logon"=""


7.  How can I practise with my own user name ?

	-  I strongly recommended you not to do this !




					E N D   N O T E S


		Distributing your serial number is illegal and is no 
			different than distributing illegal 
				copies of the registered 
				 software. Violation of
					this rule may 
					  result in 
			temporary or permanent revocation of this
			     license and cancellation of the 
			              serial number; 
				   the original licensee
			   will also be held responsible for 
			    damages, physical and estimated.


   Do not distribute your crack release based on this tutorial, because
   you become a LAMER(s)!!!!!!!!
   ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
   personal computer, using Hex Editor, ripping off other group(s)
   crack release, repacking (distro) them under his name. 
   Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) 

    More about LAMER(s):
	lamer /n./ [prob. originated in skateboarder slang]
	Synonym for luser, not used much by hackers but common among warez 
	d00dz, crackers, and phreakers. Oppose elite. Has the same connota
	tions of self-conscious elitism that use of luser does among 
	hackers.
      < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >


 		Never attribute to malice that which is adequately 
				explained by stupidity


ASTAGA [WTF/TTM/D4C/C4A] tute-privatesitez10.zip
[EOF] First Edited : 1/3/01 3:01:32 PM
Updated : 1/8/01 2:53:06 AM