Name      : GifLine

Version   : generic

Editor    : Diprode Software

Target    : gifline.exe

s/n saved : [HKEY_CURRENT_USER\Software\setenil]

Tools     : W32Dasm
            Hiew
	    Brain
	    
Cracker   : LW2000

Tutorial  : No.11

http://www.geocities.com/athens/3683


Please excuse my poor english, its not my mother language....

---
DISCLAIMER
For educational purposes only!
I hold no responsibility of the mis-used of this material!
---



1.      Start Gifline. There's an interesting button...
	'Register...' *g*. Let's do so. 
	
2.	E-Mail: LW2000@TUTORIALS.COM
	Serial: 1230099
	*BOOM*  Sorry, This Registration Code is incorrect. Typical
        program bug ;)   Exit the program.

3.	Load W32Dasm with gifline.exe. Click on the SDR Buton and
        choose the string "Sorry, This Registration Code ". 

     * Referenced by a Unconditional or Conditional Jump at Address:
        |:0045C581(C)     <-- here we go!
        |

* Possible StringData Ref from Code Obj->"Sorry, This Registration Code"
                                       ->"is incorrect. Please try again"
                                              ...

        :0045C607 B8FCC64500              mov eax, 0045C6FC
        :0045C60C E847B1FDFF              call 00437758


4.      Double rightclick on 
	|:0045C581(C) now you should be here:

        :0045C576 8B55E8                  mov edx, dword ptr [ebp-18]
        :0045C579 8B45F8                  mov eax, dword ptr [ebp-08]
        :0045C57C E8A376FAFF              call 00403C24 <-- our Call
        :0045C581 0F8580000000            jne 0045C607  <-- Bad BOY!
        :0045C587 B201                    mov dl, 01
        :0045C589 A16CE54400              mov eax, dword ptr [0044E56C]
        :0045C58E E80D21FFFF              call 0044E6A0


	Ok, I think we've found the bug...

5.	Place the green bar on:
	:0045C581 0F8580000000            jne 0045C607 
	
	Our Offset is: 5B981

	Close W32DASM and load Hiew with gifline.exe

        Press Enter twice to go to Decodemode.
        Press F5 and enter our Offset: 5B981
        Press F3 to edit the file.
        Now change 0F85 to 0F84. Our jne goes je.
        Save our work and start gifline again.

        Name: LW2000@TUTORIALS.COM
	Serial: 1230099
	

        =>> GifLine Registered Version.



Congratulation! You are a registered user!

FINISH! Easy, or?



cu LW2000
Any comments? Mail me LW2000@gmx.net !!!
----
tKC, thx for your tutors!
I started with tutor 1 and i still read them... they are the best!