home *** CD-ROM | disk | FTP | other *** search
- Name:Byte Catcher 1.01 d
- Where:http://www.save-it.com
- Type of protection:serial number
- Description:This is a neat little program that allows you to resume a
- download off of an ftp, even after disconnection, by just
- hitting the "Go" button. Some disadvantages are that it
- doesn't have a retry feature incase the server is full and
- you can't change the port number.
-
- Tools you will need to crack this program: Soft-ice 3.0 or better
- (http://www.numega.com)
- A piece of paper to write the
- correct serial # down
-
- How to crack this program:
-
- Step 1.)Load Byte Catcher 1.01 and select "About" from the "Help" menu.
- Step 2.)Click on register and fill out the information it asks for. I
- used this:
- 66696669
- Manson69
- mExElitE/c4n '97
- DO NOT HIT ENTER YET!!!
- Step 4.)Press ctrl-D to enter Soft-ice and set a break point on hmemcpy by
- typing "bpx hmemcpy" (without quotation marks.)
- Step 5.)Leave Soft-ice by hitting ctrl-D or F5. Then hit "Ok."
- Step 6.)You will be back in Soft-ice now. Hit ctrl-D or F5 two more times
- to allow Byte Catcher to read all the information you entered in the
- boxes.
- Step 7.)Now hit F12 until you get out of the 16-bit protected code and into
- the 32-bit code.
- XXXX:XXXX <----4 digits followed by a colon and 4 more digits
- indicates that you are in 16-bit protected mode
- XXXX:XXXXXXXX <----4 digits followed by a colon and 8 more digits
- indicates that you are in 32-bit code.
- Step 8.)Now lets scan for the serial number that we entered. We do this by
- typing "s 0 l ffffffff 'your code here'" (without the quotation
- marks but WITH the ' ' marks.) My serial number was 66696669 so I
- entered:
- s 0 l ffffffff '66696669'
- It will then find you your code at a given address. My serial
- number was found at the address 013F:00A22FAC. Lets now set a
- break point on this memory location by typing:
- bpm 013F:00A22FAC <----Your memory address will probably be different
- Step 9.)Hit ctrl-D or F5 to leave Soft-ice and low and behold you are right
- back in Soft-ice! You will end up in code similar to this:
- 0137:00418936 8A02 MOV AL,[EDX] <--This moves what is in
- memory at EDX to AL
- 0137:00418938 3A06 CMP AL,[ESI] DS:0047B14C=37 <--This
- compares
- what is
- in
- memory
- at AL
- and ESI
- 0137:0041893A 751E JNZ 0041895A <--Acts as a result of the
- compare.
- This is the code that we need to be concerned with. The brackets
- around EDX and ESI indicate that you are dealing with thier what is
- in their memory location not their values. If you do a
- d edx
- and view the what is in memory on EDX you will see the code you
- entered. If you do a
- d esi
- you will see the correct code. Note down the correct code,type
- "bc *" (without quotation marks) to clear all break points. Then
- enter the correct serial number in place of the one you entered and
- hit "Ok" and it will register!
- Final Notes: If you try don't enter the correct serial number, but change the
- registration name and company and follow these steps over you
- will see that the registration code doesn't change. This
- program has one universal registration code. Which mean that
- you can enter the same serial number with any name and/or
- company and it will register! Due to this fact a key maker/
- generator or crack/patch is not needed.
- Hope that this tutorial worked for you!
- Acknowledgments: I would like to say thanks to all the members and regular
- visitors of the mExElitE/c4n '97 group and channel.
-
- This tutorial was written by:
- Manson69 of
- mExElitE/c4n '97
- I can be found on IRC (Efnet)
- everyday in:
- #cracking4newbies
- the mExElitE/c4n '97 official
- channel.
-