Dreamweaver MX Ver 6.0.1722

Web : http://kickme.to/mxbnet
Contact Me : dheeraj_xp@yahoo.com

Dreamweaver MX Ver 6.0.1722

dreammx.jpg - 3096 Bytes

Type : Realy Cool program to make Web Page .. got it from PCQuest July 2002 CD [India]
Protection : VBOX 4.622 --- Soop
Tech : Dumping

Crack :

Dreamweaver MX has improved its GUI ... excellent ... i will download full version from warez site.This baby is protected by VBOX 4.622 sucker.

First of all i did was to backup my registry files.After installing it i was unable to find secret registry keys used by VBOX to count 30 days ... as we did with older version.It is doing some sort of watermarking in "System.dat" and "User.dat" file.Luckly i have backed up my files.Restoring my registry files and deleteing "*.lic" and "*.bin" file ... i was able to get a fresh 30 day ... time by running "VSETupT.exe".
Any way back up your registry files.No idea how this sucker does 30 count ?? [Can any body can help me ]
Install the program and run it.Our sucker VBOX shows its box.

Put BPX on GetStartupInfoA ... as most of the program calls it at startup.Click "Try" button.As we break in to SICE [inside DreamMx module]just look few lines above we can see real program entry point.

AF0E48 PUSH EBP
AF0E49 MOV EBP,ESP
AF0E4B PUSH FF
..................

Now AF0E48 is the real program entry point.Now restart the program and when VBOX shows its box ... put

BPX on GetProcAddressA api ....

Click "Try".When we break in to SICE [Inside VBOX mod] remove break point and set

BPMB CS:AF0E48 X

Now go a head and we break at program entry point.Now dump it and change

EP = 6F0E48

All over run it .... working fine it is asking S/N give ....

DWW600-50026-24155-17688

[Or delete following key ..
HKEY_LOCAL_MACHINE\Software\Macromedia\Dreamweaver\6\Registration..]

Go forward ... it is showing splash screen ....suddenly a page fault occurs .. " invalid call 0700ebf"..

What the heck ???

A quick comparison with VBOX protected program shows that call 0700ebf goes inside "VBOXta.dll" which then calls "PeekMessageA" api.So this is the problem.Now in SICE find real address of this api by ..

u PeekMessageA --- BFF55801 ..

Now edit our dumped file and search for

"0700EBBF" --- change to ---> "0158F5BF" OFFSET = 79CB54

All done it works fine ....

But main problem with this crack is that ... it will only work on my PC with Win98.As VBOX has done its job to fill the import table with address ..we will have to fix it or follow this tutorial on a WinNT to get a working program on WinNT.

Any Body want to test it can mail me and i will send a crack file.See if this baby works on your PC.

Any way i have a working version on my PC.

Update : Fixing the IAT [So that this shit works on ALL Pc's]

Ok now let us fix this baby so that we can run it on every PC.IAT of this file starts from .. File offset ... 79B000 ...Just look at this offset it is filled with address of API calls which our sucker VBOX have filled.Vbox have done the part of PE loader of windows.After filling API address ,VBOX have destroyed IAT.

Now use ImpRec.Keep a copy of this file in another folder so that we can fix it.Run dumped file and select process "dreamweaver.exe" in ImpRec.Give EP = 006F0E48 and hit "IAT Auto Search" ...It will tell IAT read succesfully..Now click "GetImports" .... we can see all import functions .... Now click "Fix Dump" and point it to another copy of dump file we have saved ....thats all we can now run [other file] this baby every where ...
You can verify it just look at FirstThunk in a hex editor.Orginal IAT will be restored in a new section.And ImpRec will align new IAT.

Thanks IMPREC ...

I have tested it on different PC with Win98 and WinXP .... and it is working fine ... So we have ripped of VBOX 4.622 ..... and it is time to celebrate ....

NB : Special thanks to [yAtEs] for his wonderfull essay on IAT.Special thanks to Kilby for his wonderfull essay on Copylok IAT and many many thanks for MackT/uCF2000 for his excellent tool ImpRec.

===========================================================
if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Lic File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
GetWindowsDirectory(windir,sizeof(windir));
strcat(windir,"\\Vbox\\Licenses\\ _5.51.277_5044.prf");

if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Prf File ...",InfoText,MB_OK);
error = true;
}
//================================================================
if(!DeleteFile(sysdir))
{
MessageBox(NULL,"Unable to deleted OCX File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
//Delete os*****.bin
GetWindowsDirectory(windir,sizeof(windir));

for(i=0;i < MAX_PATH;i++)
{
if(windir[i] == '\\')
{
windir[i] = '\0';
}
}
strcat(windir,"\\os291494.bin");

if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted BIN File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
if(error ==false)
{
MessageBox(NULL,"Removed VBOX Files and Registry Keys ...",InfoText,MB_OK);
}

//===============================================================
//Execute VSetupT.exe
ZeroMemory(&si,sizeof(si));
si.cb = sizeof(si);
cl = GetCommandLine();

if (!CreateProcess("VSetupT.exe",cl, NULL, NULL,FALSE,
NORMAL_PRIORITY_CLASS,NULL, NULL,&si, &pi))
{
MessageBox(NULL,"Unable to load \"VSetupT.exe\" ...",InfoText,MB_OK);
error = true;
}else
{
MessageBox(NULL,"Loaded \"VSetupT.exe\" ...",InfoText,MB_OK);
}
//===============================================================

return 0;

}
//===================================================================================