home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Reverse Code Engineering RCE CD +sandman 2000
/
ReverseCodeEngineeringRceCdsandman2000.iso
/
RCE
/
+Sandman
/
bytecatcher.txt
< prev
next >
Wrap
Text File
|
2000-05-25
|
4KB
|
88 lines
Name:Byte Catcher 1.01 d
Where:http://www.save-it.com
Type of protection:serial number
Description:This is a neat little program that allows you to resume a
download off of an ftp, even after disconnection, by just
hitting the "Go" button. Some disadvantages are that it
doesn't have a retry feature incase the server is full and
you can't change the port number.
Tools you will need to crack this program: Soft-ice 3.0 or better
(http://www.numega.com)
A piece of paper to write the
correct serial # down
How to crack this program:
Step 1.)Load Byte Catcher 1.01 and select "About" from the "Help" menu.
Step 2.)Click on register and fill out the information it asks for. I
used this:
66696669
Manson69
mExElitE/c4n '97
DO NOT HIT ENTER YET!!!
Step 4.)Press ctrl-D to enter Soft-ice and set a break point on hmemcpy by
typing "bpx hmemcpy" (without quotation marks.)
Step 5.)Leave Soft-ice by hitting ctrl-D or F5. Then hit "Ok."
Step 6.)You will be back in Soft-ice now. Hit ctrl-D or F5 two more times
to allow Byte Catcher to read all the information you entered in the
boxes.
Step 7.)Now hit F12 until you get out of the 16-bit protected code and into
the 32-bit code.
XXXX:XXXX <----4 digits followed by a colon and 4 more digits
indicates that you are in 16-bit protected mode
XXXX:XXXXXXXX <----4 digits followed by a colon and 8 more digits
indicates that you are in 32-bit code.
Step 8.)Now lets scan for the serial number that we entered. We do this by
typing "s 0 l ffffffff 'your code here'" (without the quotation
marks but WITH the ' ' marks.) My serial number was 66696669 so I
entered:
s 0 l ffffffff '66696669'
It will then find you your code at a given address. My serial
number was found at the address 013F:00A22FAC. Lets now set a
break point on this memory location by typing:
bpm 013F:00A22FAC <----Your memory address will probably be different
Step 9.)Hit ctrl-D or F5 to leave Soft-ice and low and behold you are right
back in Soft-ice! You will end up in code similar to this:
0137:00418936 8A02 MOV AL,[EDX] <--This moves what is in
memory at EDX to AL
0137:00418938 3A06 CMP AL,[ESI] DS:0047B14C=37 <--This
compares
what is
in
memory
at AL
and ESI
0137:0041893A 751E JNZ 0041895A <--Acts as a result of the
compare.
This is the code that we need to be concerned with. The brackets
around EDX and ESI indicate that you are dealing with thier what is
in their memory location not their values. If you do a
d edx
and view the what is in memory on EDX you will see the code you
entered. If you do a
d esi
you will see the correct code. Note down the correct code,type
"bc *" (without quotation marks) to clear all break points. Then
enter the correct serial number in place of the one you entered and
hit "Ok" and it will register!
Final Notes: If you try don't enter the correct serial number, but change the
registration name and company and follow these steps over you
will see that the registration code doesn't change. This
program has one universal registration code. Which mean that
you can enter the same serial number with any name and/or
company and it will register! Due to this fact a key maker/
generator or crack/patch is not needed.
Hope that this tutorial worked for you!
Acknowledgments: I would like to say thanks to all the members and regular
visitors of the mExElitE/c4n '97 group and channel.
This tutorial was written by:
Manson69 of
mExElitE/c4n '97
I can be found on IRC (Efnet)
everyday in:
#cracking4newbies
the mExElitE/c4n '97 official
channel.