SERIAL NUMBER IS FISHY - DECLINE YOUR PATCH'ITCH'ING 32bit FTP v9.20 A Cracking Tutorial by ASTAGA [D4C/C4A] DISCLAIMER This reading material is not intended to violate Copyrights and/or it is law, but educational purposes only. I hold no responsibility ( by all means and in any shape whatsoever ) of the mis-used of this material. Read END NOTES section at the end of this file. ABOUT THE PROGRAM Access millions of files via FTP for Windows 95/98/NT/2000. 32bit FTP lets you log onto millions of FTP sites all over the world. Once logged on these sites, you can browse their files. You can copy files from an FTP Site to your computer. WHERE TO DOWNLOAD Author : Jon Krahmer Copyright : ElectraSoft Homepage : http://www.ElectraSoft.com/ URL : http://www. Size : KB as of ,2000 Rel Date : 1-Aug-2000 HOW TO GET VALID SERIAL NUMBER by using SoftIce 1. Run 32BITFTP.EXE, in the registration dialog box type these below informations : Name : Red Rackham E-mail : redrackham@pirate.com Code : 73881050 Do not click A P P L Y button yet 2. Load SoftIce by pressing [ CTRL + D ], set a breakpoint as follow : BPX GetDlgItemTextA [enter] and F5 to return to the main program 3. Now, click OK button... you'll return back into SoftIce! In within SoftIce press F5 3 times then F11 once until you see and break at : ______________________________________________________________ 015F:0042F125 FF15AC6C4700 CALL [USER32!GetDlgItemTextA] 015F:0042F12B EB13 JMP 0042F140 (JUMP v) <== HERE ... ... ==> 0042F140 5D POP EBP 015F:0042F141 C20C00 RET 000C .... .... 015F:00404F0A E800A20200 CALL 0042F10F 015F:00404F0F 68A8E24600 PUSH 0046E2A8 015F:00404F14 E817BE0000 CALL 00410D30 015F:00404F19 83C404 ADD ESP,04 ==> d edi 015F:00404F1C A318054600 MOV [00460518],EAX _________________________ 32BITFTP!.text+3E08 ___________________ pRESS F10 - stop at 015F:00404F19 - and display EDI register : : d edi [enter] ==> did you see 3034353A3938 in the Data Window taking virtual address 0167:0046CAB8 ?? Far below is also 303 435 3A3 938 at 0167:0046CBC8 . Write it down them all! 4. Disable all breakpoints by typing BC * [enter] Press F5 or X to return to the main program 5. Repeat registration procedure and keyed-in 303 435 3A3 938 as your S/N. Click APPLY button ..... ouchh! the screen splash and there is no classic message " thank you .... " ?? . Just quit the application, re-run again the program, did you see your name in the TOP RIGHT taskbar window ? 6. Where the hell is my registration code is stored ?? The correct registration code is stored in the 32BITFTP.INI as follows : [Configure] CurrentYourName=Red Rackham CurrentRegisterEmailAddr=redrackham@pirate.com CurrentEmailAddress=redrackham@pirate.com CurrentUserStatus=3034353A3938 7. How can I practise with my own user name ? - I strongly recommended you not to do this ! E N D N O T E S Distributing your serial number is illegal and is no different than distributing illegal copies of the registered software. Violation of this rule may result in temporary or permanent revocation of this license and cancellation of the serial number; the original licensee will also be held responsible for damages, physical and estimated. Do not distribute your crack release based on this tutorial, because you become a LAMER(s)!!!!!!!! ( tHATDUDE (PC97) defined LAMER(s) is the guy who sits in front of personal computer, using Hex Editor, ripping off other group(s) crack release, repacking (distro) them under his name. Adopted from newsgroup alt.cracks, alt.crackers - February 1997 ) More about LAMER(s): lamer /n./ [prob. originated in skateboarder slang] Synonym for luser, not used much by hackers but common among warez d00dz, crackers, and phreakers. Oppose elite. Has the same connota tions of self-conscious elitism that use of luser does among hackers. < SOURCE: http://sagan.earthspace.net/jargon/jargon_27.html > Never attribute to malice that which is adequately explained by stupidity ASTAGA [D4C/C4A] tute-32bitftpv92.zip [EOF] 12/6/00 2:25:16 AM