Cracking "ByteCatcher v 3.2" Date: July 6, 1999 Author : +ViPeR+ [E]bola [V]irus [C]rew Program Name : ByteCatcher v 3.2 Location : http://www.save-it.com/ Method: HARD-CODED CODE <> ------------------------------------------------------------------------------- Install the program and then, click 'Help' then 'About ByteCatcher' then 'Register' to pop-up the registration window. Enter the following info. Registration No.: 54545454 Name : evc_viper Company Name : Home Ok. Fire-up Soft-Ice and set a breakpoint by typing 'bpx getwindowtexta'. Press 'x Enter' to exit Soft-Ice. Now, click the 'OK' button and you are back into Soft-Ice. Press 'x enter' 2 times and F11 to get back to the caller. Press 'F10' several times until you get to 0042A72C. :0042A72C 6888D14A00 push 004AD188 type 'd 4AD188' and you will see '239856538576' in the data window. :0042A731 8B4DF8 mov ecx, dword ptr [ebp-08] :0042A734 83C15C add ecx, 0000005C type 'd ecx', you will see the memory address that holds your fake registration code. :0042A737 E8648AFDFF call 004031A0 ; <-- compare routine :0042A73C 85C0 test eax, eax :0042A73E 7564 jne 0042A7A4 : : Bla.h..Blah...Blah.... So, get out of Soft-Ice and enter Registration No.: 239856538576 Name : evc_viper Company Name : Home and the program is registered under your name. Well, this program doesn't show you the usually "Thank you for registering" messagebox. Anyway, Job done. Final Note: After I cracked this program, I use W32DAsm to get a dead-listing of it. Without doubt, the registration code is hard-coded in the program. The user name, Company name have nothing to do with the real registration code. I couldn't believe that in today, there are still programmer hard-coded the registration code inside their program. Ob Duh Do I really have to remind you all that by buying and NOT stealing the software you use will ensure that these software houses will continue to produce even *better* software for us to use and more importantly, to continue offering even more challenges to breaking their often weak protection systems. +ViPeR+ [E]bola [V]irus [C]rew July 6, 1999