Jack Tut No. 1
	
	Program    : PowerZip v4.02
	Where      : http://www.powerzip.lco.net
	Protection : Name / Serial Check
	Tools Used : W32Dasm,Hiew

About the Program :
	A very useful little utility for all types of compressed files including Zip/Tar/GZ/RAR/etc. Uses Dll's From different authors.Not much more to say.

Lets Rock :

	OK, Now install the program.Requires a reboot but works just fine without it too.Now run the program.No nags!Kewl.(Actually its free for personal use as the author puts) Now Goto Help >> About PowerZip
Following screen appears:

            +-----------------------------------------------+
	    |    PowerZip v4.02				    |
	    |                                               |
            |                                               |
            |      ..........                               |
            |         ..........                            |
            |          					    |
	    |                                               |
            |                                               |
            | This Copy is UNREGISTERED.                    |
            |      [OK]    [Register]                       |
	    +-----------------------------------------------+
Click on Register.
Now Enter the Name as TNT[CRaCK! TEaM] And Reg Code As 112233
Press OK.
Now it Says : "The Registration Number is invalid."

Note it.

Close PowerZip.
Goto Powerzip program folder and copy PowerZip.exe to back.exe

Now Goto W32Dasm and disassemble PowerZip.exe
GoTo Refs >> SDR and search for the string : "The Registration Number is invalid." Double Click it.Now you are here :
  
* Reference To: MFC42.Ordinal:18BE, Ord:18BEh
                                  |
:00412719 E82CDE0000              Call 0042054A
:0041271E 817E6440800601          cmp dword ptr [esi+64], 01068040
:00412725 742F                    je 00412756   << Good_Boy
:00412727 6A00                    push 00000000
:00412729 6A10                    push 00000010

* Possible StringData Ref from Data Obj ->"The registration number is invalid."
                                  |
:0041272B 6814BF4200              push 0042BF14 << Here

Now Scroll up and You see a conditional jump at 00412725 . Here the program compares our fake serial to the real one and if its equal then jump to Good_Boy .We want it to jump to good boy always so just change the je (Hex : 74h) to jmp (Hex : EBh) . thats it!
Note the offset (11B2Bh) and close W32Dasm and run Hiew.exe
Now Press F4 to change mode to decode and F5 to enter offset. Enter the offset as 11B2B and press Enter. now Change 74 to EB and Press F9 to update and F10 to exit Hiew. Run the program and Goto Help >> About...
Press Register,Enter any Name and a serial and Press OK. *BOOM* Youre registered.

Now if youre intrested then you can see that PowerZip Makes a file after successful registration in program Directory called PowerZip.key
Here it stores your real Reg Number.So if You want to reg To your name without patching,then just follow the above procedure for the back.exe file you created (Copy of PowerZip.exe) and when you register for a fake serial with back.exe, it creates a regfile .so delete the back.exe and open regfile with a text editor(Notepad).Now You have your name with *real serial* Use it to reg your original exe file (PowerZip.exe) without patching!

End Notes :
	For Comments on this tut,improvements or just about anything,mail me at
jack_81@rediffmail.com

Thx,
Jack / TNT!
 
              ing we have to work