SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING


ActiveX Manager v1.3
A Cracking Tutorial 
by ASTAGA [WTF/TTM]


DISCLAIMER 

This reading material is not intended to violate Copyrights 
and/or it is law, but educational purposes only. I hold no 
responsibility ( by all means and in any shape whatsoever ) 
of the mis-used of this material.
Read END NOTES section at the end of this file.



ABOUT THE PROGRAM 

ActiveX Manager
Manage ActiveX Controls the easy way.
How many times have you tried to  register/unregister an ActiveX 
control (OCX) and wished  there  was a  better way to do it then 
REGSVR32? ActiveX Manager enables users and developers to manage 
ActiveX Controls installed on their PC the easy way. It is great 
for users who  surf the Web and want  to keep their system clean 
(ActiveX Manager helps  you clean controls installed by Internet 
Explorer).      ActiveX Manager provides a simple yet slick user 
interface that   enables you to view registered controls, remove 
misbehaved controls,   register new controls and more.   ActiveX 
Manager provides fast access  from Windows Explorer via a pop-up 
menu.


WHERE TO DOWNLOAD


Author   	: 4Developers LLC
Copyright	: 4Developers LLC
Homepage 	: http://www.4Developers.com
URL		: http://www.4developers.com/software/axmgr.exe
Size 		: 225 KB  as of 1/10/01
Rel Date	: 



HOW TO GET VALID SERIAL NUMBER by using SoftIce


There is no changes in the protection scheme since I met 
this program 2 years ago. However, it's small, handy and
usefull utility program.


1.  Run XMGR.EXE, in the registration dialog box type these 
    below informations :

	Name	 : Red Rackham
	Code    : 73881050

    Do not click UNLOCK button yet
    

2.  Load SoftIce by pressing [ CTRL + D ], set a breakpoint as 
    follow :
    

	BPX Getwindowtexta     [enter]   and
   	F5  to return to the main program


3.  Now, click UNLOCK button... you'll return back into SoftIce!
    In within SoftIce press F11, F5, F11, then F10 once until 
    you break at :

	______________________________________________________________

	015F:00401968  E87B750000       CALL   00408EE8 <==BREAK HERE
	015F:0040196D  6860D04000       PUSH   0040D060
	015F:00401972  8D4DE8           LEA    ECX,[EBP-18]
	015F:00401975  E838750000       CALL   00408EB2
	015F:0040197A  C745FC00000000   MOV    DWORD PTR 
						[EBP-04],00000000
	015F:00401981  8B00             MOV    EAX,[EAX]
	015F:00401983  6888D24000       PUSH   0040D288

	___________________________ XMGR!.text+0968 __________________

	Create new breakpoint for later evaluation :
	: bpx 015F:00401968  [enter]

	Now, disable all breakpoints and do a search string for your
	fake code :

	: bd *  [enter]
	: s 0 l fffffffffffffff '73881050'  [enter]
	Pattern found at 0167:0040D160 (0040D160)
	: bpr 0167:0040D160 0167:0040D160+15 rw  [enter]
	: press X  or  F5  to let SoftIce break into this location


4.  If nothing goes wrong you'll break again at these below 
    snippet codes : 


	015F:780047F2  8B02      MOV       EAX,[EDX]
	015F:780047F4  3A01      CMP       AL,[ECX] <== break here
	015F:780047F6  7530      JNZ       78004828
	015F:780047F8  0AC0      OR        AL,AL
	015F:780047FA  7429      JZ        78004825
	015F:780047FC  3A6101    CMP       AH,[ECX+01]
	015F:780047FF  7527      JNZ       78004828
	...
	______________________ MSVCRT!.text+37F2 ___________________

	Break due to BPR #0167:0040D160 #0167:0040D175 RW 
	While at 015F:780047F4 - dump EDX register :

	: d edx  [enter]  ==> did you see 6577-7Ix0QPz at virtual 
				0167:007742FC ?
				Write it down this potential reg code.


5.  Disable all breakpoints by typing 

	BD *   [enter]
	Press F5 or X to return to the main program
     

6.  Repeat registration procedure and keyed-in 6577-7Ix0QPz as 
    your S/N. 
    Click OK button .....  there you're registered.


7.	Where the hell is my registration code is stored ??

	The correct registration code is stored in the registry as
	follows : 
	REGEDIT4
	[HKEY_LOCAL_MACHINE\Software\4Developers\XMgr]
	"4D"=hex:52,65,64,20,52,61,63,6b,68,61,6d,00,20,55,53,45,52,
	00,00,00,00,00,00,\
  	00,00,00,00,00,00,00,00,36,35,37,37,2d,37,49,78,30,51,50,7a,
	00,55,53,45,52,\


8.  How can I practise with my own user name ?

	-  I strongly recommended you not to do this !




					E N D   N O T E S


		Distributing your serial number is illegal and is no 
			different than distributing illegal 
				copies of the registered 
				 software. Violation of
					this rule may 
					  result in 
			temporary or permanent revocation of this
			     license and cancellation of the 
			              serial number; 
				   the original licensee
			   will also be held responsible for 
			    damages, physical and estimated.


   Do not distribute your crack release based on this tutorial, because
   you become a LAMER(s)!!!!!!!!
   ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of
   personal computer, using Hex Editor, ripping off other group(s)
   crack release, repacking (distro) them under his name. 
   Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) 

    More about LAMER(s):
	lamer /n./ [prob. originated in skateboarder slang]
	Synonym for luser, not used much by hackers but common among warez 
	d00dz, crackers, and phreakers. Oppose elite. Has the same connota
	tions of self-conscious elitism that use of luser does among 
	hackers.
      < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html >


 		Never attribute to malice that which is adequately 
				explained by stupidity


ASTAGA [WTF/TTM/D4C/C4A] tute-xmanager13.zip
[EOF] 1/11/01 4:17:01 PM