CRACK LOCATOR

story_of_crack.txt: VisualFusion version 2.1 - 3d Tracking and Motion Analysis http://www.svsinc.com/< /a>~spsvs/VisualFusion/visualfusion.html 11/16/00 Flying Raichu This is for the demo that has restrictions on files that can be opened. (apparently no time limit for usage?) 1) About box says: "Licensed to: Demo Copy S/N: xxxxxxxx-1" 2) XgPlot and XgMovie both say same thing. 3) Searching in VisualFusion.exe, we see this is hardcoded as unicode at fi le offset 05D426h (suggested that we can't make this is a *pure* licensed version). 4) Search and replace shows us that this unicode string is also in Xg3dDll.dll, XgM.exe, XgMovieDll.dll, XgPlot.exe, and XGPlotDll.dll (ugly/messy) 5) I set the date ahead 1 year and no error. No nags ever either. What doe s the demo limit? 6) From XgMovieDll.dll, peek: 0004D340: This demo copy has expired. For further support c ontact: Jack Sanders-Reed, SVS, Inc. 505- (apparently not in other files, either. wierd.) NOTE: i can't find reference to this in file. 7) More goodies from XgMovieDll.dll, peek: 0004A9F1: ?CheckTimedDemo 0004AB02: ?DemoFileValid 0004BED1: ?ValidDemoName 0004D6A8: This is a demo version which only works with the demo image files 0004D710: This is not the demo file "" lots and lots more of these 8) cracker humour: ha ha, you wouldn't believe this program does. the demo comes with (on the cd) a large number of sample files, maybe 50 or so. You know how it checks whet her it will let you load a file, or whether to complain that "this is not a demo file?" - in the code, every time you open a file, it does a sequence of 5&# 48; comparisons, one for each file name that is allowed! That is what all those separate "This is not the demo file" messages are ! ha! so, if you want to load a file from the real version, just rename it to one of the names on the demo cd. and if you rename a file that is on the demo cd to be something else, it will refuse to load it. so sad. so wasteful. 9a) Code which does a simple check for valid demo file names: * Reference To: XGMOVIEDLL.?DemoFileValid@CXgMovieDoc@@AAEHPBD@Z :100068B9 E861820000 call & #49;000EB1F (file 05CB9h) :100068BE 85C0 test eax, eax :100068C0 7507 jne 100 8;68C9 :100068C2 33C0 xor eax, eax ; :100068C4 E9AD040000 jmp &# 49;0006D76 Very inefficient. silly. anyway, just set eax=1 instead of making the c all. This is the call to a procedure which large number of indep. tests which say  4;This is not the demo file" 9b) Here is a call to a second check for valid demo file names, which is mor e sneaky :10006835 E80E7D0000 call 1 000E548 (file 05C35h) :1000683A 85C0 test eax, eax :1000683C 7507 jne 100068 45 :1000683E 33C0 xor eax, eax ; :10006840 E931050000 jmp 10006D76 This is the call to a procedure which has one message at the end of test "Th is is a demo version which..." 10) Check for timeout of demo * Reference To: XGMOVIEDLL.?CheckTimedDemo@CXgMovieDoc@@AAEHXZ | :10006035 E8F6840000 call 1 000E530 (file 05435h) :1000603A 85C0 test eax, eax ; :1000603C 7507 jne 100 8;6045 :1000603E 33C0 xor eax, ea& #120; :10006040 E9310D0000 jmp 10006D76 // looks like in my version that this never times out, but is just in there for future demo limitations. // still we might fix it... 11) PS, files are marked as read-only; change to be able to modify them . 12) OKAY, SO TO CRACK: First thought might be to change the 3 calls above to "mov eax, 0&# 48;000001" BUT, since this is a dll, and other external programs may call the procedur es, we will change the start of each procedure to do "mov eax,00 8;00001;ret" B801000000 mov eax, 00 ;000001 C3 ret Do this at: :1000EB1F 55 push ebp (file 0DF 9;Fh) :1000E548 55 push ebp (file 0D948h ) :1000E530 55 push ebp (file 0D9 ;30h) 13) Now to fix the aesthetics of about box(s). Even though the text about "Licensed" appears in all files, the onl y ones that I can see that are actually displayed are in the XgMovieDll.dll, and XgPlot.e&# 120;e Not sure why this is so. May be that others come up if these are used at matlab plugins? SO, i change just these two files, but if you like you can change all. "L.i.c.e.n.s.e.d. .t.o.:. .D.e.m.o. .C.o.p.y... . . .S./.N.:. .x.x ;.x.x.x.x.x.x.-.1" [4C006900630065006E00730065 006400200074006F003A0020 00440065006D006F002000430 ;06F00700079000A00200 8;2000200053002F004E003A0 8;20007800780078007800780078 00780078002D003100] Changes to: "..F.u.l.l. .V.e.r.s.i.o.n. .-. .F.l.y.i.n.g. .R.a.i.c.h.u. .l.i.c.e.n.s.e. " [0A00460075006C006C00200 8;560065007200730069006F006E 0020002D00200046006C007& #57;0069006E0067002000520 8;61006900630068007500200 ;06C006900630065006E00730 8;650000] 14) Okay, seems to work; only thing i worry about is expiration, but i can't get it to expire and i can't find where it might reference the timeout string, so we just ho pe that this version doesn't really ever expire, OR that by fixing the about c ode, we have prevented expiration. 15) Remember to tell user to change file properties to turn off the Read-onl y flag. README.TXT: The files that need to be patched, XgMovieDll.dll and XgPlot.exe, are installed as READ-ONLY; in order for this crack to work you need to remove the read-only flag for these files from windows before running the crack. TO do this: 1) open Windows Explorer, go to the Visual Fusion directory (default is C:\Visfus). 2) Right-click on XgMovieDll.dll, select "Properties" (near bottom). Uncheck the "Read-only" box. 3) Right-click on XgPlot.exe, select "Properties" Uncheck the "Read-only" box. Then run the crack. FlyingRaichu.nfo: ---------------------------------------------------------------------- The Flying Raichu Super Happy Cat Power Club is open to all crackers; you only have to be willing to document and teach with each crack. ---------------------------------------------------------------------- ______ _ _ _____ _ _ | ____| | (_) | __ \ (_) | | | |__ | |_ _ _ _ __ __ _ | |__) |__ _ _ ___| |__ _ _ | __| | | | | | | '_ \ / _` | | _ // _` | |/ __| '_ \| | | | | | | | |_| | | | | | (_| | | | \ \ (_| | | (__| | | | |_| | |_| |_|\__, |_|_| |_|\__, | |_| \_\__,_|_|\___|_| |_|\__,_| __/ | __/ | _____ |___/ |___/ _ _ / ____| | | | | | (___ _ _ _ __ ___ _ __ | |__| | __ _ _ __ _ __ _ _ \___ \| | | | '_ \ / _ \ '__| | __ |/ _` | '_ \| '_ \| | | | ____) | |_| | |_) | __/ | | | | | (_| | |_) | |_) | |_| | |_____/ \__,_| .__/ \___|_| |_| |_|\__,_| .__/| .__/ \__, | | | | | | | __/ | |_| |_| |_| |___/ _____ _ _____ _____ _ _ / ____| | | | __ \ / ____| | | | | | __ _| |_ | |__) |____ _____ _ __ | | | |_ _| |__ | | / _` | __| | ___/ _ \ \ /\ / / _ \ '__| | | | | | | | '_ \ | |___| (_| | |_ | | | (_) \ V V / __/ | | |____| | |_| | |_) | \_____\__,_|\__| |_| \___/ \_/\_/ \___|_| \_____|_|\__,_|_.__/ /QG/ (G C@@#s~ 3 ~ %@@@R7 ^ % t /B@@@S^ ( /%R@@@@# (/ // /#@@@@37#@@@@@@@G(/ ( 7 #@@@@@@@@@@@Q~// // ~ @@@@@@@@@R( ^/ //^ // ( ^(3@@@@@@@@G/ ~ /~ ( (/ / ^(~///~K@@@@@s t7 ^ ~ t O^ ( (/t %/~@@@@@# s^ 7 ~( ^ (G % (//R 6//@@@@@/ ~/ // 3/ ^ / / ( /~//(@@@%//O@@@@( ( ~O3 ^^ / /%t % /R@%~//~(@@O/~//%@@@@Q(^^ ^ // ^ Q 3 C @@Q/~///~~~3#S#3~/(SSR@@@@BO/ 3 G^ ( ~3///~////SGOGOQ~///////3/ / t O t( /3(~/////SSOGSK~///////~R/ ^ ^O %t (/~/~//~~(((////~////~KR/ % ~ (/~~~////~~~~//s~/GGe@ % 3^ / t/~/////~tS@6~~3 % t ~%3~/ (/////~//(GOeQ36 t / KOG~/t (/~/~~/~(O6OOS6 7S ( eOOe(% %/~//////6GOGsSR @s~ ^GOO6t/ (~tS(~///3GG@RGQ /@@6 OS~(( 3%~~tOO6#S%@SKS #@@^ %6 %R///~////3%~/% (@@~ C6~///~~///~%( K@@/ Qt////~//~~Q /@@@7 B3///////6@ R@@@t / @R(///~~@@@7 ^%R@@@R/ ^%@(////%6@@@@@#@@@@@@@t ^/(t s O#//////% %B@@@@@@R/ Kt//////~/~637^ S/////~3 eOG//////////3O t//////S7 OOOOS(//////~SQ/ /(/////OG6 OOOOOGSSQ#% ~S~~/~GOG# sGOKKOGSO# (QO#GOOGeS #OROOOGQ6 "Semper Quaero" %GRO6OOK /RSOOK /QK7 ---------------------------------------------------------------------- ---------------------------------------------------------------------- file_id.diz: VisualFusion version 2.1 - 3d Tracking and Motion Analysis http://www.svsinc.com/< /a>~spsvs/VisualFusion/visualfusion.html 11/16/00 Flying Raichu This is for the demo that has restrictions on files that can be opened. (apparently no time limit for usage?)