Cracking Tutorial #48:
Cracking Paltalk Release 5 PV28 Build 431 *alternate approach*
[cracked bY:] sLeEpY¿[FWA/NWA/FTPR8Z] iN 06/2002
[difficulty:] beginner
[where:] http://www.paltalk.com
[tOOLz:] Ultraedit32 V9.0 + paltalk tut #1

KANAL23 Tutorial

http://www.kanal23.net

This is an alternate approach to getting rid of the nags in paltalk. I will not go into to much depth as I explained a lot in the first paltalk tutorial so get it if you are lost. This tutorial will just explain after the paltalk is unpacked, CRC trashed, and managable, and will explain quickly how you can hex-edit sometimes to solve problems with banners. Also there seems to be a trouble with the loader as it only works on w98SE hehe, so tough. You can still follow the instructions and create the loader for other OS;s i just dont wanna install em all just for gay ass paltalk.

What you need is Ultraedit32 V9.0 or a good hex-editor, this is a cheesy way but kinda kool way to trash banners in a program. What we are going to do is replace all isntances
of the banner ad with C:\sleepy.jpg and in hex C:\sleepy.jpg =
43 3a 5c 73 6c 65 65 70 79 2e 6a 70 67
 

Now we just search for every instance of the banners, http://advertising.paltalk.com or ads whatever. Each of these below is an instance of the ads in hex.

Change this:

000c4050h: 68 74 74 70
000c4060h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000c4070h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000c4080h: 70 61 6C 6C 69 73 74 42 61 6E 6E 65 72 2E 70 6C
000c4090h: 3F 25 73 26 63 6C 69 65 6E 74 3D 6D 6F 72 70 68
000c40a0h: 65 75 73 00 68 74 74 70 3A 2F 2F 61 64 76 65 72
000c40b0h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000c40c0h: 6F 6D 2F 70 65 72 6C 2F 70 61 6C 6C 69 73 74 42
000c40d0h: 61 6E 6E 65 72 2E 70 6C 3F 25 73

To This:
000c4050h: 43 3A 5C 73 <-changing to C:\sleepy.jpg, as with all the rest below
000c4060h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000c4070h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4080h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4090h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c40a0h: 00 00 00 00 43 3A 5C 73 6C 65 65 70 79 2E 6A 70 <-changing
000c40b0h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c40c0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c40d0h: 00 00 00 00 00 00 00 00 00 00 00



Change this:
000c40f0h: 68 74 74 70
000c4100h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000c4110h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000c4120h: 70 61 6C 6C 69 73 74 42 61 6E 6E 65 72 2E 70 6C
000c4130h: 3F 25 73 26 63 6C 69 65 6E 74 3D 6D 6F 72 70 68
000c4140h: 65 75 73 00 68 74 74 70 3A 2F 2F 61 64 76 65 72
000c4150h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000c4160h: 6F 6D 2F 70 65 72 6C 2F 70 61 6C 6C 69 73 74 42
000c4170h: 61 6E 6E 65 72 2E 70 6C 3F 25 73

To this:
000c40f0h: 43 3A 5C 73
000c4100h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000c4110h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4120h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4130h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4140h: 00 00 00 00 43 3A 5C 73 6C 65 65 70 79 2E 6A 70
000c4150h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4160h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4170h: 00 00 00 00 00 00 00 00 00 00 00


Change this:
000c41a0h: 68 74 74 70 3A 2F 2F 61
000c41b0h: 64 76 65 72 74 69 73 69 6E 67 2E 70 61 6C 74 61
000c41c0h: 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F 73 65 61 72
000c41d0h: 63 68 42 61 6E 6E 65 72 2E 70 6C 3F 25 73

To this:
000c41a0h: 43 3A 5C 73 6C 65 65 70
000c41b0h: 79 2E 6A 70 67 00 00 00 00 00 00 00 00 00 00 00
000c41c0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c41d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Change this:
000c4220h: 68 74 74 70 3A 2F 2F 61 64 76 65 72
000c4230h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000c4240h: 6F 6D 2F 70 65 72 6C 2F 73 65 61 72 63 68 42 61
000c4250h: 6E 6E 65 72 2E 70 6C 3F 25 73

To this:
000c4220h: 43 3A 5C 73 6C 65 65 70 79 2E 6A 70
000c4230h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4240h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c4250h: 00 00 00 00 00 00 00 00 00 00


Change this:
000c71d0h: 68 74 74 70 3A 2F 2F 61
000c71e0h: 64 76 65 72 74 69 73 69 6E 67 2E 70 61 6C 74 61
000c71f0h: 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F 67 72 6F 75
000c7200h: 70 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70 61
000c7210h: 67 65 6E 75 6D 3D 25 64 26 63 61 74 67 3D 25 64
000c7220h: 26 63 6C 69 65 6E 74 3D 6D 6F 72 70 68 65 75 73

To this:
000c71d0h: 43 3A 5C 73 6C 65 65 70
000c71e0h: 79 2E 6A 70 67 00 00 00 00 00 00 00 00 00 00 00
000c71f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7200h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7210h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7220h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Change this:
000c7230h: 68 74 74 70 3A 2F 2F 61 64 76 65 72
000c7240h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000c7250h: 6F 6D 2F 70 65 72 6C 2F 67 72 6F 75 70 42 61 6E
000c7260h: 6E 65 72 2E 70 6C 3F 25 73 26 70 61 67 65 6E 75
000c7270h: 6D 3D 25 64 26 63 61 74 67 3D 25 64

To this:
000c7230h: 43 3A 5C 73 6C 65 65 70 79 2E 6A 70
000c7240h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7250h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7260h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7270h: 00 00 00 00 00 00 00 00 00 00 00 00

Change this:
000c75b0h: 68 74 74 70 3A 2F 2F 61
000c75c0h: 64 76 65 72 74 69 73 69 6E 67 2E 70 61 6C 74 61
000c75d0h: 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F 67 72 6F 75
000c75e0h: 70 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70 61
000c75f0h: 67 65 6E 75 6D 3D 25 64 26 63 61 74 67 3D 25 64
000c7600h: 26 63 6C 69 65 6E 74 3D 6D 6F 72 70 68 65 75 73

To this:
000c75b0h: 43 3A 5C 73 6C 65 65 70
000c75c0h: 79 2E 6A 70 67 00 00 00 00 00 00 00 00 00 00 00
000c75d0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c75e0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c75f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7600h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Change this:
000c7610h: 68 74 74 70 3A 2F 2F 61 64 76 65 72
000c7620h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000c7630h: 6F 6D 2F 70 65 72 6C 2F 67 72 6F 75 70 42 61 6E
000c7640h: 6E 65 72 2E 70 6C 3F 25 73 26 70 61 67 65 6E 75
000c7650h: 6D 3D 25 64 26 63 61 74 67 3D 25 64

To this:
000c7610h: 43 3A 5C 73 6C 65 65 70 79 2E 6A 70
000c7620h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7630h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7640h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000c7650h: 00 00 00 00 00 00 00 00 00 00 00 00

Change this:
000cdf90h: 68 74 74 70
000cdfa0h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000cdfb0h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000cdfc0h: 70 6D 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70
000cdfd0h: 61 67 65 6E 75 6D 3D 25 64 26 63 6C 69 65 6E 74
000cdfe0h: 3D 6D 6F 72 70 68 65 75 73 00 00 00 68 74 74 70
000cdff0h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000cd000h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000cd010h: 70 6D 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70
000cd020h: 61 67 65 6E 75 6D 3D 25 64

To this:
000cdf90h: 43 3A 5C 73
000cdfa0h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000cdfb0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cdfc0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cdfd0h: 00 00 00 00 00 00 00 00 00 00 00 00 43 3A 5C 73
000cdfe0h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000cdff0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cd000h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cd010h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cd020h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Change this:
000ce190h: 68 74 74 70
000ce1a0h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000ce1b0h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000ce1c0h: 70 6D 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70
000ce1d0h: 61 67 65 6E 75 6D 3D 25 64 26 63 6C 69 65 6E 74
000ce1e0h: 3D 6D 6F 72 70 68 65 75 73 00 00 00 68 74 74 70
000ce1f0h: 3A 2F 2F 61 64 76 65 72 74 69 73 69 6E 67 2E 70
000ce200h: 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70 65 72 6C 2F
000ce210h: 70 6D 42 61 6E 6E 65 72 2E 70 6C 3F 25 73 26 70
000ce220h: 61 67 65 6E 75 6D 3D 25 64

To this:
000ce190h: 43 3A 5C 73
000ce1a0h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000ce1b0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000ce1c0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000ce1d0h: 00 00 00 00 00 00 00 00 00 00 00 00 43 3A 5C 73
000ce1e0h: 6C 65 65 70 79 2E 6A 70 67 00 00 00 00 00 00 00
000ce1f0h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000ce200h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000ce210h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000ce220h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Change this:
000cf0e0h: 68 74 74 70 3A 2F 2F 61 64 76 65 72
000cf0f0h: 74 69 73 69 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63
000cf100h: 6F 6D 2F 70 65 72 6C 2F 6D 76 42 61 6E 6E 65 72
000cf110h: 2E 70 3C 3F 25 73 26 63 61 74 67 3D 25 64 26 63
000cf120h: 6C 69 65 6E 74 3D 6D 6F 72 70 68 65 75 73 00 00
000cf130h: 68 74 74 70 3A 2F 2F 61 64 76 65 72 74 69 73 69
000cf140h: 6E 67 2E 70 61 6C 74 61 6C 6B 2E 63 6F 6D 2F 70
000cf150h: 65 72 6C 2F 6D 76 42 61 6E 6E 65 72 2E 70 6C 3F
000cf160h: 25 73 26 63 61 74 67 3D 25 64

To this:
000cf0e0h: 43 3A 5C 73 6C 65 65 70 79 2E 6A 70
000cf0f0h: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf100h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf110h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf120h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf130h: 43 3A 5C 73 6C 65 65 70 79 2E 6A 70 67 00 00 00
000cf140h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf150h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000cf160h: 00 00 00 00 00 00 00 00 00 00
 

Phew!! That is every instance! Now make a file called sleepy.jpg and put it in your root drive, C:\, and instead of the banners you will see your pic loading in its place!

Now I was also alerted to popups coming when the app opens of closes. This requires a little modification to paltalk.exe in Hiew. After pissing around for a couple days I found that palnet.exe was the source of the problems so lets just remove that file. Now when we run paltalk we get an error that the file is missing and the original coder had a banner backup plan. Now html files get created and loaded by most likely shellexecute. So we just have to get rid of palnet.exe and then go into w32dasm and find that error and bypass it:

:00428E17 751E jne 00428E37 (28E17)
:
:lines of code
:
palnet.exe missing

:00428E17 751E jne 00428E37
Change this to jmp!
:00428E17 EB1E jmp 00428E37

No more popups at the beginning or end!
Laterz!

This program is a headache after i've been in it so much, THE END.

Groups: FWA, NWA, FTPiRatEz! HAR! BEASTFXP!, KANAL23
Individuals: MiNioN, GreycZ & his cuppy, KlutCh, KiNgEr, MidNight, Edogg, Neoman, movax4c00int21, Acid_Cool_178, All those tuts I read from everyone who writes them.

CopyLeft:
sLeEpY¿
[all rights reversed]
Boredom causes crackers and babies.
Visit http://zor.org/sleepy & http://www.bright.net/~testsubject001
Mail sleepy@linuxwaves.com

This Document is copyrighted by kanal23 and it's members. Please mail the author of this document for complaints and those things.
Kanal23 is signing out for now.