Copernic 4.1 reversing  You pay for the ads	Anti Advertisement
1/1/2000	by Tsehp
	Courtesy of reverser's page of reverse engineering	slightly edited by Tsehp
	There is a crack, a crack in everything That's how the light gets in
Rating	(x)Beginner (x)Intermediate ( )Advanced ( )Expert

Lets end all of this...

Copernic 4.1 reversing
 You pay for the ads
Written by Tsehp

Introduction

Almost everybody knows this application, it's a meta search engines that uses all the 

most current search engines. It's the most used, so like m$, they use their almost 

monopolistic situation and transform your computer into a mall. Without asking you

if they are authorised to.

Just try this : download the copernic 2000 pro version 4.0 (it will self update to 4.1)

Use a regular, non burned serial (a lot of keygens exists), at first launch, it shows no

ads and everything is working fine. But this tool is auto updating to have the last

links to search engines, and when it does it shows you at the next searches beautiful

banners at the top of your screen. Off course you bought it and you can disable the

ads : tools,options,uncheck display ads while searching. But at the next update (almost

every day) it will self check this option and show you again the ads, so they are sure

you will see at least one. You'll be bored to uncheck this option everytime and will

give up, covered by ads.

Off course there is a crack to destroy all this devious work, you still have the right

to control what's happen inside your pc. I will just show you this easy crack.  

Crack is made on my actual win 2000 build 2195.3

The first step is not to hurry on softices bpx, use zen cracking and think :

There is a feature to remove the ads, so this prog keeps a flag for it, inside a file or

the registry.

Use regmon and check and uncheck the display ads option, bingo it's inside the registry

at HKEY_CURRENT_USER\Software\Copernic Technologies\Copernic4Plus\Preferences\showad

If this key contains ffffffff, copernic will show them, if contains 00000000 it will

not.

You can delete also this key, the ad banners will be gone.

But at the next links update, this f****** key appears again.

So re-install this prog, and just before doing a new search (before the update feature)

fire softice, bpx regcreatekeyExa do "d esp->8" and pret 

until HKEY_CURRENT_USER\Software\Copernic Technologies\Copernic4Plus\Preferences\ shows

inside the data buffer. So the handle of this key is retrieved, the next function to 

come for copernic to create the showad key is : regsetvalueExa, so put a 

bpx regsetvalueExa do "d esp->8", you land into the api. Do a d esp->14 and the

ffffffff value appears.

Exit this function with F12, you land here :

We avoid the key creation, and it will never show the ads.

Trace back a little (two calls before) and you land here :

A very easy one, just force the jump at (1) at 46610c and the key will never be created.

I usually say, this is for learning purposes...blah blah...buy this prog...but not

this time. Those guys takes your money and split on your face with the banner

autoshow feature. So I encourage you to create the patch and spread it with the

keygen, until those guys remove the feature on the next version. 

homepage links search_forms +ORC how to protect academy database
reality cracking how to search javascript wars
tools anonymity academy cocktails antismut CGI-scripts mail_reverser
Is reverse engineering legal?