play makAll work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All
HBAM2016AUG95
Pro 3.0
All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dullCopyright 1984-1996 Claris Corporation
and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy.
monitor@
HBAM3016AUG95@
12/94
201/deck
website
builderD
3dsmax
4-sightF
4-sight
backupG
boxingH
calcI
chartJ
classic
runtimeK
compilerL
compiler
connectivityN
developerO
drawP
engineQ
firstR
insiderS
internet
toolkitT
online
helpU
runtimeV
serverW
smartserverX
writeY
dimension[
right
term^
tuner_
deluxe`
a-10a
attacka
cubab
aaron
flowcharterd
toolkite
abovef
above
diskf
accent
accessh
386 MaxT
240-104343 or 40090206002U
Look Mom no hands
Nv1.0:
Just hold down mouse button while starting up the computer to register it.
v1.5:
To register, hold down the control key and the mouse button during startup, it will disable some Extensions and Control Panels, but after loading, you get the "Now Registered" message; just restart and no more annoying "Please Register" message!
change it to ":",
thats a colon without the qB uotes
Now it'll run w/o the CD.
3D Website BuilderT$GMCAH109-000-9AC8
3DWEB053-000-1C10U
v1.0f
3dsMaxT
s/n:40090206002f
4-Sight FaxT
203589 (5 Users)U
v3.1f
E 4D BackupT0020576164612344 235454466188886
734599269880441
1734599269880441
020576164612344
235454466188886U
v1.5f
80441
1734599269880441
020576164612344
235454466188886U
v1.5f
dVeQdR
4/18/98
COMPANY
CRACKS
PLATTFORM
PROGRAM NAME
RELATED
SERIAL
TOPIC
Program nameB
CracksB
SerialB
VersB
&A PlattformB
CompanyB
RelatedB
TopicB
Hljodod
Hljod
Hljod
A List ViewB
A More infoB
Recordi
Delete
Recordj
Recordn
Closep
Cracksq(Brougt to you by the mighty Hackers nests
Registration|
Vers}
Serial
Program name
View As
View As
Close
U&More info, related topics and articles
InformationB
Close](Brougt to you by the mighty Hackers nestf
View As
Listg
View As
Formh
Recordi
Delete
Recordj
Recordk
Closen
Close](Brougt to you by the mighty Hackers nestf
View As
Listg
View As
Formh
Recordi
Delete
Recordj
Recordk
Closen
Hackers Nestpy
name: [k]rack Works
Code: XKSVPSCATQOSMD
Name: My Darling
Code: VRSXIMBUGALULCU
v1.2.xf
Hackin
Hotline
s Prefs
by [k]racker box
About
A couple of people have asked me about this so I spent fifteen minutes one Saturday and did something about it. Nuff
What I
m hacking here is those four stats you see in About Hotline: Bytes Uploaded, Downloaded, etc.
Why? Well, I know that after a while if the ration between bytes downloaded and bytes uploaded is huge then Hotline will change your name to
[yourname] needs to upload
or someth
View As
ListK
View As
FormL
CloseO(Brougt to you by the mighty Hackers nestP
Disclaimer and info:
Welcome to this new year edition of the Hackers Nest serial database.
THIS FILE CONTAINS HACKS AND CRACKS WHICH PEOPLE FROM ALL AROUND THE WORLD HAVE MADE. THIS FILE IS ONLY A COLLECTION WHICH IS MADE FOR EDUCATIONAL PURPOSES ONLY. IF YOU WANT TO TRY ANY OF THE HACKS OR CRACKS, YOU SHOULD BUY THE SOFTWARE FIRST, THEN YOU CAN SEE JUST HOW EASY HACKING CAN BE AND WITHOUT BRAKING ANY LAWS.
WE DONT KNOWN WHO MADE ANY OF THOSE HACKS AND CRACKS, AND WE ARE NOT RESPONSIBLE FOR ANY OF THEM. ALBiL WE DID WAS TO COLLECT THEM INTO ONE GROUP TO SHOW HOW MUCH PROBLEM HACKER'S ARE BECOMMING TO THE WORLD.
Januar 1998 edition (a)HOSE HACKS AND CRACKS, AND WE ARE NOT RESPONSIBLE FOR ANY OF THEM. ALL WE DID WAS TO COLLECT THEM INTO ONE GROUP TO SHOW HOW MUCH PROBLEM HACKER'S ARE BECOMMING TO THE WORLD.
Januar 1998 edition (a)X
Hljod
EE JUST HOW EASY HACKING CAN BE AND WITHOUT BRAKING ANY LAWS.
WE DONT KNOWN WHO MADE ANY OF THOSE HACKS AND CRACKS, AND WE ARE NOT RESPONSIBLE FOR ANY OF THEM. ALL WE DID WAS TO COLLECT THEM INTO ONE GROUP TO SHOW HOW MUCH PROBLEM HACKB ER'S ARE BECOMMING TO THE WORLD.
Open up the PageMaker App itself with ResEdit (or your favorite Brand X resource editor) and find the 'KXRX' resource. The net ID number is located between offsets 0A and 1F inclusive. You will find all of the bytes at these offsets have already been zeroed. Change them to whatever makes you happy (as long as it's unique for each machine on the net).
==========
Searc
h for: 6B00 00F4 203C 0000
Change to: 6000 " " " " " "
Search for: 670E 4267 4EBA FCF0
Change to: 600E " " " " " "
Search for: 670C 4267 4EBA FCD4
Change to: 600C " " " " " "
==========
Search for: 676E 4267 2F07 4EAD
Change to: 606E " " " " " "
==========
Pagemaker Ser. # Removal:
To erase the serial number of Page Maker:
- Start Fedit
- Open File Page Maker
- Read sector 0 of the file
- At location $158 you will find a string like
xxxx 69xx xxxx 69xx xxxx
which is the serial number. They, of course, encoded it but with a
simple key. They used the creator string "ALDU" and pass each letter in
turn to encode each number of the serial number.
Ex.:
$71 XOR $41 (A) = $30 (0)
$7E XOR $4C (L) = $32 (2)
$69 XOR $44 (D) = $2D (-)
and so on...
- If you just change the numbers to put out a 00-000-00000, the program bombs
out of its skull.
- A little more digging uncovers the preceding two bytes. $156 is the address
wh
ere the serial number check begins. It is normally a $0D so the checking
doesn
t begin until the 6th number ($15D) in the serial number string
(which starts at $158).
- $157 is the number of digits to print in the serial number box when the
program starts. If the number is less then $0C (original number), the
The "Type on Call bundle version" serial number would be: AAB QWY SAHI MSRV
those are 12 letters however to add more fonts, you need to enter the 14 character. that would be CDW200B1753407U
v1-265f
Adobe Type ManagerTECIB00000000001-999-266
CIB00000000002-999-899
CIBXBKWM000001-999-178
ATW400P1234852-273
ATW400P1234567-912
ATW400P1234852-273
DCIBXBKWM000001-999-178
CIB00000000002-999-899
CIB00000000001-999-266U
4.0b6
4.0b11
4.0b13
4.0b17
Adobe Type ReunionT
GPW200P3123456-457
GPW200P3123456-457
ATW400P1234852-273
)GPW200R3127266-880
CIB00000000001-999-266U
2.0b17
2.0fc9
Deluxef
d Type
FHW251R31003373
v1.0f
After Dark
A;AD3-00670-6681
ADW-33671-7329
KAW-64331-1262
DSW-36523-5758
v3.0f
After Dark Marvel
MVW-92958-1201
adobe
manager
adobe
reunion
adobe
adrenaline
adrenaline
numbers
charts
advanced
after{
after
after
marvel
after
simpsons
after
posters
after
after
totally
twisted
after
disney
after
x-men
after
agency
agency
database
fotoflow
aircombat
aladdin
aladdin
desktop
tools
alchemy
aldus
aldus
fetch
alias
alias
director
alias
sketch
alien
alien
action
allegiant
allegiant
marionet
alley
allfix
alpha
alpha
business
edition
alphamania
alphapage
alsoft
alsoft
power
altamira
altamira
composer
altos
altos
system
setup
chartJ
classicK
compilerL
composer
After Dark Simpsons
ZQW-33671-7329
ZQW-35600-2587
KAW-64331-1262
After Dark Star Trek Posters
SPW-06753-8181
After Dark Star Trek:TNG
BSW-35600-2587
ZQW-33671-7329
ZQW-35600-2587
After Dark Totally Twisted
BII-00670-6681
After Dark Walt Disney
DSW-36523-5758
After Dark X-Men
AD3-00670-6681
After life
Run without the CD:
Use ResEdit, Resourcerer,or whatever to open the program file.
(ALWAYS USE A COPY!!!)
Open STR #128
Add to String #2 and String#4 <name of your HardDrive> :
EXAMPLE: If your HD is named Soup it would look like this.
Soup: Afterlife Data
Lemme append to this. This hack, while it does work, mabye could use a bit of clarification. The files have to be EXACTLY where they are named in the STR #128 string. Meaning if you reaname it to.. for example MyDrive:Afte
rlife, then it has to be in the root directory of your hard drive, or it will still bitch for the CD.
I wanted the program in my games directory, so I put in the hiearchical structure, using ":" to indicate successive directories.
MyDrive:Games:AfterLife:AfterLife - for example.
If you're not sure, or want to be postive, do a "get info" on the files, and then just copy the file location info from it.
Another simpler way is to just copy all the files into a folder names Afterlife. Then ma
ke an ImageMaster file of the directory. When you want to play it you just drag the imagemaster file over Imagemaster and it creates an "image" on your desktop. The game will now find the "image" and you don't have to screw with res-edit.
I did the above with the full CD and another user, on a different site, also tried this and it worked just fine with the smaller files going around. The original CD is 345 megs and packs to about 150+- megs.
Agency Database
ADW00195
v1.12f
Agfa Fotoflow
410210021-086
v1.0f
bE AirCombat
v1.0.1
removes pasword protection:
change CODE 9 at Offset 44F0 from 660C to 4E71
and at Offset 44FA from 6700 to 6000
Air Combat 1.2 Change 'CODE' 9 Offset $46CE from $6624 to $6024
and any number you enter in the Query-Dialog will work.
v1.01.
v1.2f
Aladdin Desktop ToolsT
ADTB-778-010000
oADTB-778-055000
ADTP-968-267822
ADTX-764-125860
ADTL-978-121617
ADTE-777-455225
ADTH-619-131366
ADTK-761-463014U
v1.0.1f
Aldus FetchS'See Fetch later than 1.0 at Adobe FetchT551-1000-201176607
ARACommander 2.1 demo Change 'cdev'-4064 Offset $047A from $6600 to $6000 Change 'CODE' 2 Offset $0E74 from $6758 to $6058 Change 'CCOD'-4062 Offset $021E from $671A to $601A
ARAScripter
AjARAScripter 2.1 demo Change 'CODE' 2 Offset $0E02 from $6750 to $6050
to remove the 30 day limitation.
Arcserve
10AS 1163609 (10 Users)
5.01f
Arcsolo
EVSO 1231464
3.02f
12345
2.41f
Armor Alley
To play a multiplayer game of Armor Alley, each copy needs to be registerred with a different serial number. These serial numbers are for Armor Alley
1.0.1. Some may have typos. Just make sure there is no Armor Alley prefs file in the system folder so you can register Armor Alley with a new serial number.
EFFECT: Disables network serial number checking.
HOW TO: Open CODE resource 6
at offset 03CE, change words to $4E71 4E71
All patchs, open the Armor Alley suspended game file with a
hex editor such as the Norton Disk Editor
# Change the number of helicopters you have - offset 3ECA - 3ECB - change the two bytes to the number of helicopters you want (ie. 0064 = 100 helicopters)
# Change the number of funds you have - offset 3ECC - 3ECD - change the two bytes to the number of funds you want (ie. 5000 = 20480 funds) - NOTE: Funds go up as forces go further in the field, if funds go over 7FFF they will become captured; I recommend 5000 as a safe figure (and a lot of fund
# Change the number of machine gun bullets (or those silly non- tracking missiles) you have - offset 3F84 - 3F85 - change the two bytes to the number of bullets you want (ie. FFFF = 65535 bullets) - NOTE: FFFF will show up as -1 on the display in Armor Alley. The bullet count will continue counting -2,-3,-4 until it gets to 7FFF where it will start counting down from there (effectively 65535 bullets)
# Change the number of bombs you have - offset 3F86 - 3F87 - change the two bytes to
the number of bombs you want (ie. FFFF = 65535 bombs) - NOTE: The rules for bombs are the same as for bullets
# Change the number of missiles you have - offset 3F88 - 3F89 - change the two bytes to the number of missiles you want (ie. FFFF = 65535 missiles) - NOTE: The rules for missiles are the same as for bullets
# Change the number of men in your helicopter - offset 3F8A - 3F8B - change the two bytes to the number of men you want in your helicopter (ie. FFFF = 65535 men in your helicoE
pter) - NOTE: The rules for men are the same as for bullets - NOTE: When you drop men your funds increase rapidly because you get funds for equipment as it is further out in the field
The serial number generating algorithm is as follows:
DesiredNum=0;
for (i=0;i<6;i++) DesiredNum|=CharMapIndexValue(SNStr[i+1])*Mult[i];
Where:
DesiredNum=10007*k, for some k>0.
Mult[]={33554432,32768,32,1024,1,1048576} // note these are integral powers of 32
CharMap | 00000000001111111111222222222233
Index Val | 01234567890123456789012345678901
---------+---------------------------------
SNStr Char| thequickbrwnfxjmpsvazydg23456789
Example: if we let k=666 then Desired Num=666466
2, now 6664662 = {0,6,11,12,14,22} in base 32 which is transformed into {0,11,14,12,22,6} by the mapping {a,b,c,d,e,f}->{a,c,e,d,f,b} thus the corresponding serial number is "TNJFDC"
T4TNJFDC
H255ZR
QSQDEH
QY64AX
Y7CJGE
YBXT27
Y49G74
v1.0.3f
BackburnerT
02-1606-3424U
v3.1f
Ballade
2004100460
Banner 3
507230300326
Bar Code ProT
9123-245 TN293 45501
9074-545 TN293 45501
8556-545 TN293 45501U
v2.0.5
v2.0.8
v3.0f
BarrackT
KBJFKKIB Copies:10 'Anonymous'
-Name: SPC
Copies: 666
Code: NNLOANLAU
v1.0.2f
BBS Bowl
A.15766 17388 19789 17677 18378 18683 18787 8142
Bedlam 2SfName Buck Rogers
SN# (lower left field) 2049942273
Registration# (lower right field) 98765432
BeHierarchic
The following algorithm used to generate your own numbers is for the technically inclined ONLY!
Table:
Binary Hex Bit
Value Val. Position
---------------- ---- --------
0010100100111111 293F (bit 00)
0101001001111110 527E (bit 01)
1010010011111100 A4FC (bit 02)
0100100111111000 49F8 (bit 03)
1001001111110000 93F0 (bit 04)
0010011111100000 27E0 (bit 05)
0100111111000000 4FC0 (bit 06)
1001111110000000 9F80 (bit
0011111100000000 3F00 (bit 08)
0111111000000000 7E00 (bit 09)
1111110000000000 FC00 (bit 10)
1111100000000000 F800 (bit 11)
1111000000000000 F000 (bit 12)
1110000000000000 E000 (bit 13)
1100000000000000 C000 (bit 14)
1000000000000000 8000 (bit 15)
Pattern:
abcdefgh (sequential alphabet letters)
^ ^ ^ ^ (swapping indicated by arrows)
| | | |
| +--+ |
+------+
or...
hbfdecga (alphabet letters arranged in pattern form)
Method:
1. Use the first 2
bytes in the user name as a short word.
2. Find all numbers in table which, when summed, will derive given word.
(disreguard first half of long word created by summing)
3. Create new word by setting bits indicated in the table by numbers used.
4. Repeat process for the next 2 bytes of the user name.
5. Place the first derived word next to the second and, using pattern, create result.
Sample:
Given...
User Name : =-BOOK-WORM->
Method:
1. First 2 bytes are "=
-" (Character) or 3D2D (Hex) or 0011110100101101 (Binary)
2. The following numbers from the table when summed, will derive 3D2D
0010100100111111 293F (bit 00) +
0101001001111110 527E (bit 01) +
1001001111110000 93F0 (bit 04) +
1001111110000000 9F80 (bit 07) +
0111111000000000 7E00 (bit 09) +
1111000000000000 F000 (bit 12) +
1110000000000000 E000 (bit 13) +
1100000000000000 C000 (bit 14) +
1000000000000000 8000
(bit 15) = 00053D2D or 3D2D by disregarding first short word
3. According to step 2, bits 0,1,4,7,9,12,13,14, and 15 are ones and the rest are zeros:
1111001010010011 (Binary) or F293 (Hex)
^ ^
| |
(bit 15) (bit 0)
4. Next 2 bytes are "BO" (Character) or 424F (Hex) or 0100001001001111 (Binary)
The following numbers from the table when summed, will derive 424F
0010100100111111 293
F (bit 00) +
1001001111110000 93F0 (bit 04) +
0010011111100000 27E0 (bit 05) +
0100111111000000 4FC0 (bit 06) +
1001111110000000 9F80 (bit 07) +
0111111000000000 7E00 (bit 09) +
1111000000000000 F000 (bit 12) = 0003424F or 424F by disregarding first short word
bits 0,4,5,6,7,9 and 12 are ones and the rest are zeros:
0001001011110001 (Binary) or 12F1 (Hex)
^ ^
| |
w (bit 15) (bit 0)
5. Derived word one "F293" placed next to derived word two "12F1" is...
F29312F1
abcdefgh (sequential alphabet letters)
using pattern where (in this example) a=F, b=2, c=9, etc...
122319FF <-- Serial Number (finally:)
hbfdecga (alphabet letters arranged in pattern form)
User Name :Registered
Serial No :77DBD551
User Name :John Doe
Serial No :22E1FD1E
User Name :
<---(3 <option>-spaces)
Serial No :08D68BE8
User Name :=-BOOK-WORM->
Serial No :122319FF
v3.0.2f
Beyond Press XTT
GATE00414816U
v1.0f
BGfax
Az123456 Pop Nr: C9659F6D 201258 Pop Nr: DFCA99E0 654321 Pop Nr: 5D0DB5B3 123456 Pop Nr: 1DF17BAE 921233110 Pop Nr: 4FAD154D
Bicycle Bike
log On Disk
A WWUXPQVYP
Big BusinessT
Serial Number: 6000-0943
Registration Code: M9-GQV4-7G
Confirmation Code:
G59F-Q2GP-YH22-M289
Butler SQL2.1 1543650128U
v2.0f
Bills To Pay ProT
B2P30000000f
Newton
BinuscanT:SN#: 16849
Password 1: QRBs2LBUeY4
Password 2: vUEpAVINq8CU
v1.0f
E Birmy RIP
bicycle
bike'a'log
business
bike'a'log
billing
bills
bills
binuscan
bioassistant
birmy
birmy
bitcom
bitfax
bitfax/sr
bitsurfr
black
black
night
blackboard
blade
blade
blastermaster
blood
blood
bluebox
bluebox
rhapsody
blueprint
bluewave
board
bolero
bonkheads
bookends
boxingH
brainhex
brewer's
brewer's
planner
bubble
bubble
trouble
buddy
builderD
burn-it
buromanager
buromanager
business
butler
simply
accounting
cache
cachesaver
calcI
calcworks
calendar
calera
calera
wordscan
caliburn
caligari
caligari
space
candy
cantax
cantax
canvas
Bitcom
A271113 A329618
5.4cf
Bitfax
A248258
3.09cf
E Bitfax/SR
538976348-BWM
Printer Type Epson Stylus Pro
Fulfillment Response 1985771100
Serial Number BKWM0
Printer Code 555819357-BWM
Printer Type Epson Stylus XL
FulfillB
ment Response 2002614109
Authorization code: 318444283
(goes with the serial number: 6307)
Serial #: 6307
Printer Code: 2981212585-82
Fulfillment Response: 318444283 <- This is the needed number.
v3.1f
Bitcom
A271113 A329618
5.4cf
Bitfax
A248258
3.09cf
E Bitfax/SR
A006844633
5.6df
Blackboard
A 5:<;C<6<<=E> <<<<<( ?G49( *4</1(
Blastermaster
A8(put The Next Line In A Batchfile) SET SBMASTER=798-3240
Give yourself extra cash - Your available funds are stored in Intel notation (LSB MSB) *around* address 120 in hex format. Note down your current funds, convert it to hex, then reverse the byte-pairs from $xxxx yyyy to $yyyy xxxx. - open the Civ game file with a disk editor and search for the
string you have just created ($yyyy xxxx) - replace the found bytes with a new value in the same LSB MSB format - save your work Make buying an improvement give you $32,000 - CODE 14, offset 4E48 - change 6E00 B6FA to 363C 7D00 - CODE 14, offset 4E6E - change 9750 to 3083
Get $32,000 whenever you sell anything - CODE 14, offset5340 - change 700A C1D0 to 303C 7D00 - CODE 14, offset 5352 - change D150 to 3080
Buy anything produced in your city without losing any money - CODE 14, offset 4E
00 - change 6E12 to 4E71 - CODE 14, offset 4E48 - change 6E00 B6FA to 4E71 4E71 - CODE 14, offset 4E6E - change 9750 to 4E71 - CODE 14, offset 62F6 - change 9150 to 4E71
Stop losing money at each turn due to low taxes - CODE 13, offset 18B8 - change 6E00 0088 to 4E71 4E71 - CODE 13, offset 18DA - change 9150 to 4E71
Patch the map display so you can see what's under the black - CODE 3, offset 3B28 - change 6712 to 4E71
Prevent Global Warming - CODE 7, offset 5544 - change 6624 to 6024
revent you losing any offensive battles - CODE 7, offset 03DA - change 672A to 602A - CODE 7, offset 040C - change 662C to 4E71 - CODE 7, offset 0456 - change 6C06 to 4E71 - CODE 7, offset 0590 - change 6E18 to 4E71
Prevent loss of troops & settlers from food shortages - side effect of this patch is that your cities don't grow - CODE 14, offset 37E8 - change 6600 0080 to 6000 04AE - CODE 14, offset 06FE - change 6600 to 6000
Allow all items to travel on water - CODE 11, offset 2118 - cha
nge 6600 to 6000
Allow boats to travel on land - CODE 11, offset 271E - change 664A to 604A
All technology takes one turn - side effect: affects enemy technology as well! - CODE 14, offset 602C - change 6C28 to 4E71 - CODE 14, offset 6046 - change 670E to 4E71
Airplanes can't run out of fuel - CODE 11, offset 3F74 - change 6C14 to 6014
Allow you to build cities on water - CODE 11, offset 1978 - change 6700 00DE to 6000 0096
Allow your troops to attack from water - CODE 11, offset 21F
E - change 662A to 602A # If you don't want to try all these hacks, there's a program to do it for you, called "Civ Crack Editor" and available from all good Info-Mac archives & mirrors
Version: "1.0.8"
TO completely bypass the protection dialog.
CODE 9
+2D4E from $4EBA to $4E71
+2D50 from $0014 to $4E71
+2D56 from $6x08 to $6008
(I forget the actual value that x represents above, but it doesn't really matter.)
Version: "1.0.7"
EFFECT: Select any item in the password dial
og box.
HOW TO: LOCATE CODE RESOURCE 9
CHANGE THE WORD AT OFFSET 31C6 FROM 6662 TO 4E71
CHANGE THE WORD AT OFFSET 2D58 FROM 4267 TO 4E71
CHANGE THE WORD AT OFFSET 2D5A FROM 4EBA TO 4E71
CHANGE THE WORD AT OFFSET 2D5C FROM 0008 TO 4E71
CHANGE THE WORD AT OFFSET 2D5E FROM 548F TO 4E71
if you don't want to see the dialog at all you can change all the words between (and including) offsets 1D0C and 1F1C to 4E71.
Version: "Q&A List"
The following list is all the questions you may be ask
ed after playing for 1000 years after starting the program. They are very simple and you will be given an approximate page number. Every 5 or 6 items here I have given page numbers, so that should make the choice of what I am talking about fairly easy. If you answer wrong, you might as well quit. Wrong answers will tell you that you were wrong.
Picture of B2 Bomber Flight and Electricity
Scroll in Star Map Mysticism and Mathematics
Atom
Theory of Gravity and Physics
Old Car Combustion and Steel
Piggy Bank Trade and the Republic
Bridge Construction and Iron Working
Black Pot on tripod(17) University and Medicine
Sword with Scarf Horseback riding & Feudalism
Statue of man with sword and scale Alphabet
Combustion engine
Refining and Explosives
Soviet hammer cross Philosophy and Industrialization
IBM PC Computer Mathematics & Computers
Plain soldiers(35) Republic and Explosives
Hand holding hammer over inc. house Masonry and Currency
Coins and Dollars Bronze Working
Three hands over flag Philosophy and Literacy
Kite in lightning Metallurgy & Magnetism
Circuit board Enginerring and Electricity
Circuit design under ruler Wheel and Construction
Explosives Gunpowder and Chemistry
Castle on Hill Masonry and Monarchy
Man with Wings Combustion and Physics
Two Atoms splitting Nuclear Power and Superconductor
Molecular Splicing(47) Medicine and the Corporation
Old gun wit
h Gunpowder Bag Invention and Iron Working
Factory emitting Smoke Railroad and Banking
Old Phonograph Engineering and Literacy
Shield and Spears Bronze Working
Shaking Hands with Shovel and Axe Mass Production and Communism
Open book with 3 closed in back Writing and Code of Laws
Magnet(64) Navigation and Physics
Map
Alphabet
3 Cars Automobile and the Corporation
Abacus adding machine Alphabet and masonry
Red Cross with Snaking lines Philosophy and Trade
Smelting Ore cup pouring(78) Gunpowder and University
Crown Ceremonial Burial and Code of Laws
Suppliant Meditating Ceremonial Burial
Ship Wheel Map Making
Nuclear Explosion
Atomic Theory & Mass Production
Nuclear Sign Electronics and Nuclear Fission
Pensive Sitting Statue(86) Mysticism and Literacy
Wheel Scale with two arrows Mathematics and Navigation
Plastic Engine Refining and Space Flight
Train(92) Steam Engine and Bridge Building
Recycle Sign Mass Production and Democracy
Robotic
Implements(112) Plastics and Computers
Rocket Advanced Flight and Electronics
View of Earth Computers and Rocketry
Steam Engine Physics and Invention
Pouring Steel Metallurgy and Industrialization
Two Meters Plugged into Wall Plastics and Mass Production
4 Men in front of Graph(118) Banking and Industrialization
Eagle on
Globe Code of Laws and Literacy
Balls falling with arrows on sides Astronomy and University
Hands Exchanging coins(122) Currency and Code of Laws
Scholar's Cap Mathematics and Philosophy
Writing Quill(124) Alphabet
Version: "Cheats"
I couldn
t find the location of the $ in the game before, so finally I
said to hell with it, I
ll just find somewhere where it accesses it and hack
there. (It seems to only decipher the $ when it needs to and the encrypt/hide it as I had searched the entire range of program memory for it at various interupt points.) ... Anyways to make buying a unit/improvementt give you $32,000 (!!!) just do this:
Civilization CODE #14
+4E48 6E00B6FA->363C7D00
+4E6E 9750->3083
To make it give you $32000 whenever you sell anything (unecessary if you do
the first one, but the first one may be to much of a cheat for some people)
+5340 700AC1
D0->303C7D00
+5352 D150->3080
of course these ruin the game, but hey so what you now know that you can
dominate the game and thus do not have to waste the rest of '93 playing it.
s cheat for Civilization! Sure the challenge of Civilization is the entertaining part of the game, but there's something to be said about nuking the shit out of the other guys. So, here's a cheat so that you can buy anything that
s being produced in your city without losing any money. Also it stops yo
u from losing any money each turn by low taxes or whatever:
Change CODE 14 This patches the buying
Offset:$4E00 From: $6E12 To: $4E71
Offset:$4E48 From: $6E00 B6FA To: $4E71 4E71
Offset:$4E6E From: $9750 To: $4E71
Offset:$62F6 From: $9150 To: $4E71
Change CODE 13 This patches losing money each turn
Offset:$18B8 From: $6E00 0088 To: $4E71 4E71
Offset:$18DA From: $9150 To: $4E71
s cheats for Civilization!
AKA -
Civilization Championship Edition
Fifth Revision
Sure th
e challenge of Civilization is the entertaining part of the game, but there
s something to be said about nuking the shit out of the other guys. So, here
s a bunch of cheats that I made for
stress relief.
i) Allows you to buy anything for your city without losing any money
ii) Stops you from losing any money each turn, for low taxes, or whatever.
iii) Allows you to see what
s under the black (where you haven
t been) on the map.
Unfortunately, you can't see other cities unless
ve been there.
iv) Prevents Global Warming
v) Prevents you from losing any offensive battles.
Doesn't work for other people attacking you.
vi) Prevents losing troops and settlers from food shortages
Side effect - your cities don't grow.
vii) All items can walk on water!
viii) All boats can swim on land!
You can attack cities, but you can't take them over (yet).
ix) SuperTechnology - all technology takes one turn.
Enemy technology also takes one turn.
x) Airplanes can't run out of fuel.
xi) Build cities on water
xii) Troops can attack from boats or the water without landing
Change CODE 14 This patches the buying
Offset: $4E00
From: $6E12
To: $4E71
Offset: $4E48
From: $6E00 B6FA
To: $4E71 4E71
Offset: $4E6E
From: $9750
To: $4E71
Offset: $62F6
From: $9150
To: $4E71
Offset: $6316
From: $5350
To: $4E71
Offset: $6330
From: $5350
To: $4E71
Offset: $6354
From: $5350
To: $4E71
Change COD
E 13 This patches losing money each turn
Offset: $18B8
From: $6E00 0088
To: $4E71 4E71
Offset: $18DA
From: $9150
To: $4E71
Change CODE 3 This patches the map
Offset: $3B28
From: $6712
To: $4E71
Change CODE 7 This patches the global warming
Offset: $5544
From: $6624
To: $6024
Change CODE 7 This patches the battles
Offset: $3DA
From: $672A
To: $602A
Offset: $40C
From: $662C
To: $4E71
Offset: $456
From: $6C06
To: $4E71
Offset:
$590
From: $6E18
To: $4E71
Change CODE 14 This patches the food shortages
Offset: $37E8
From: $6600 0080
To: $6000 04AE
Offset: $6FE
From: $6600
To: $6000
Change CODE 11 This patches walking on water
Offset: $2118
From: $6600
To: $6000
Change CODE 11 This patches boats on land
Offset: $271E
From: $664A
To: $604A
Change CODE 14 This patches the SuperTechnology
Offset: $602C
From: $6C28
To: $4E71
Offset: $6046
From: $670E
To: $
Change CODE 11 This patches the airplane fuel.
Offset: $3F74
From: $6C14
To: $6014
Change CODE 11 This allows you to build cities on water.
Offset: $1978
From: $6700 00DE
To: $6000 0096
Change CODE 11 This allows troops to attack from water.
Offset: $21FE
From: $662A
To: $602A
The two most useful cheats I know are:
1: Save the game before the last piece moves, then quit and start your saved
game. All your pieces will be able to move again.
2: Enginee
rs can accomplish any one task in one turn if after you assign them
a task, you repeatedly click on them, wake them up, and reassign the task.
U v1.1.2
v1.0.8
v1.0.7f
Claire Vocal CoachT
515.101.00014596U
vAllf
Claris Emailer
f804977886.3295
f804977886.3295U
v1.0.3f
Claris FileMakerT
1120000
1120000
1-9014-1162-2607-8043
1-1014-8202-3422-5503
1-1014-4853-6353-3488
1-1014-5760-6587-7434
1-1014-4700-1566-7751
1-1014-3856-3360-7811
1-1014-0093-5556-7528U
Pro 3.0
Pro 4.0
anizerS/v1.0.2
(Enter any number with 6 or more digits)T 0085731
7003958325 (British version)
v1.0.2
v1.0v4f
Claris Organizer
A&Enter any number with 6 or more digits
Claris Organizer
A&Enter any number with 6 or more digits
claire
vocal
coach
claris
claris
emailer
claris
filemaker
claris
filemaker
claris
impact
claris
organizer
clarisworks
classicK
classroom
classroom
publisher
cleaner
cleaning
clearphone
cleensweep
clickpad
client
clinical
clinical
pharmacy
clipfolio
clipmedia
clipmedia
industry
clipmedia
perfect
presentation
clock
closeup
closeup
host/remote
clouds
viewer
coach
coach
coach
olorswitch
colorswitch
colortron
cometpage
cometsite
comma
comma
commander
comment
compacter
compacter
compel
compel
compilerL
complete
complete
program
deleter
composer
concertwave
conflict
conflict
catcher
11-15
20001
20b17
20fc9
v1.0v2f
ClarisWorks
"These used to be Claris's master serial numbers for dealers, and can be used to register most older Claris software such as FileMaker Pro 2.1, older versions of ClarisWorks, etc. The last digit can be anything from 0 to 9. New Claris software has its own unique serial number (what a pain!)
E CopyPasteS1Rename the extension from CopyPaste to Copy-PasteU
v3.1.1f
Corel Gallery
CG2-020-123456
Corel Photopaint
PP5-062483 PP5-2522-97100
5.0+f
Corel Ventura
CD5-050-118034 CD5-123-456789
#E Coreldraw
A,CD5-123-456789
CD5-050-216533
CD5-050-118034
$E Corelflow
A5SW-Q023-CF-E
SAT507300794
SAT577300794
CF2-123-456789
Corstream Dedicated Server
CBA 0009432
CPU Monitor Plus
CPUP-V230-512073
'E Create-ItT
CRM9301513U
vAllf
(E Crosstalk
627736VT
Crystal Caliburn
CRYSTAL CALIBURN 1.0.2
EFFECT: Gets rid of the 'Your data file as been installed improperly dialog box.
HOW TO:
LOCATE CODE RESOURCE 2
CHANGE THE WORD AT 3510 FROM 6710 TO 6010
a hack that lets you play crystal calibourn on a 12" screen
(by doing this you can see most of your flippers instead of none.)
use resourcerer and open the 13" WIND template change to:
top 0 bottom 612 left 0 right 512.
it's not perfect but it is playable this way - it also lets you see the left
part of the game.
# Give yourself any number of balls per game - open the 'DIPs' resource with ResEdit - change the two word-values as follows: - $251F $0003 for 3 balls - $2CCD $0005 for 5 balls - $2CAE $0007 for 7 balls - $2CCD $000A for 10 balls - $2CDC $0014 for 20 balls - $2900 $0063 for 99 balls
vAllf
Crystal Graphics Flying Fonts
A,RB10-0140-1022
RB10-0140-1023
RB10-0140-1104
CSI Socket SetTdEnter anything in the Name and Company.
Code: jimb0
(last digit is a Zero - for the serial#)
CStar
5011380-8195
CUSeeMeT
BCBE-001Y-0NAG-82C8
v2.0.0b
CyberAssistant
Name MoonDark
Registration Code MPBDFGBFU
v1.3f
CyberFinderT0CYBG-699-146342
CYBE-587-336153
CYBK-425-815180
v2.xf
CyberGauge
CG41008
CG47824
CG43752U
v1.1f
CyberSound FX
How to crack CyberSound
FX 1.0 (fat)
Open a filter with ResEdit and search "AFlt" resource for hex "4A0066" and replace the PREVIOUS 4 bytes with "103C0001".
(This will crack the 68k stuff)
Next, open "AFlT" resource and search for hex "B06100384800002C" and replace the NEXT 4 bytes with "38600001".
(This will crack the PPC stuff)
This must be done to ALL filters in the set except the "Normalize" one.
* If you're not concerned with the added speed of native code, you may also delete tBQhe "AFlT" resource and still run it on a PPC (only in 68k emulation mode though).
67-04-10-000025-144U
v1.0f
Cyclone IIT2234-FMA-4
244-FMA-5
254-FMA-6
264-FMA-7
274-FMA-8
v1.0f
D.B. Express
PE15003-1194
DabblerT
0013058-6239
DM200NAZ0006148-FKWW-001U
v2.0f
Dabbler
DM200NAZ0006148-FKWW-001
Daceasy EIS
EI50X101175
Dagesh
334 804 020 072 125
Dark Forces
Dark Forces Mac<-->PC Data File Exchange
The way to change PC "*.GOB"
files into something that Mac Dark Forces likes is to:
Set the creator of the file to 'dRfO'.
Set the type of the file to 'DATA'.
Double-click on the .GOB file and away you go!
v1.1.1f
Data Access Tools
1F00028-01104360
2.0af
Data Junction
W103100217
Databoss
access
acconting
accounting
accpaci
accpac
simply
acountingi
accutext
acdsee
acountingi
acrobatv
actionl
94-0202-000361
1.01f
Databoss
93-1207-000398
Datacad Estimator
A 5401-1092
Datacad Professional
(Update) DC50C-8298
5.05f
DataDeskT%Any number between 1 and FFFFFFFF hexU
v5.0f
@E Datamaker
104010201F6
DAVETcJR6JFYCVJ4SQCKDUST8J8IBW
JR6LFYAVJ4SYCKDUST8J8IBW
JRFRF7EVJ4SQCKDUST4JHIBW
JRFJFYCVJ4SQGKDUST4J8IBWU
1.0.xf
Davinci E-Mail
52XVD-GBEUP-6BP3A
2.52f
Day - Timer OrganizerT 820008739U
v2.0f
exchangez
executive
exile
exile
exile
exodus
expert
explorer
exposurepro
express
expression
expressnet
extender
extension
extensions
extensions
strip
extensis
extensis
drawtools
extensis
intellihance
extensis
extensis
portfolio
extensis
preflight
designer
extensis
effects
external
extreme
extreme
candy
illustrator
image
impact
industry
insiderS
intelligent
intellihance
internetT
junction
karaoke
label
learning
library
lookB
handsB
magic
maker
management
manager
marionet
professional
program
program
switcher
project
project
manager
workbench
projpeg
property
protel
protel
proterm
psearch
phonebook
12/94
phonebook
raytracing
reader
ready
reality
recorder
reduction
render
request
resources
response
restart
return
reunion
right]
rocket
runtimeK
salomon's
saver
schedule
scholar
scout
screen
screensaver
security
separator
series
serverW
setup
share
sidemill
simplyi
simpsons
simulator
sketch
smartserverX
smartsuite
snoopyq
soccero
socket
solutions
solver
songbook
sound
dedicated
default
default
folder
deleter
deliverance
delivery
delrina
delrina
perform
delrina
wincom
delta
delta
graph
davinci
davinci
e-mail
timer
organizer
daytimer
daytimer
organizer
dazzle
dazzle
dbase
dbase
death
death
blade
debabelizer
wizard
Daytimer Organizer
A 710000000
Dazzle Plus
DP940235
dBase IV
DA712A1047458
DCC Pro
A 267109015
3.02f
Death Blade
------------- SN algorithm -------------------
User: This is a Test
First the app forces the string to all caps so its now:
User: THIS IS A TEST
Then the app strips the spaces
User: THISISATEST
Then it reverses the string
User: TSETASISIHT
Then is pads the string with X's if its less then 8 chars long
(example here: User: SPC would become CPSXXXXX cool?)
once we're here it begins the encryption that will become your serial number. There is a master which is "MFRAFGBT". It will add t
-his to your 8 chars. and then do some math on it.
Infinite energy - CODE 4, offset 270A - change 660C to 600C T
51244-442657-100016
v1.0f
Delrina Perform
2201-8201-1029
Delrina Wincom Pro
37Z59J
Delta Graph ProT
DGM3000900
MUU35-0827-3837184026
MUE40-0326-1631366984
00000-0000-0882591744U
v3.5.x
v4.0.1f
Demo Maker
AI(edit DEMOMAKE.KEY) Line #1: 30-1123 Line #2: 182220 Line #3: (Your Name)
Demo Workshop
A'Name: Okware SN: 0AQ6M5RBRATPN8HN64K05I
Descent
Krak:
1- Open Descent with ResEdit.
2- Open the STR resource -- there is only one.
3- Change "Descent:Install Descent" to ":Install Descent"
4- Use SetItsType to change ANY file (text file if you want) to
APPL/STi0 <-- that's a zero, zip, zilch, nil from whatever is was, not an "oh". Make sure this file is IN the Descent folder IN the same directory as the Application.
5- Call your dummy file "Install Descent"
That's it! You can kill the imagemaster file now, I believe. Keep the archive ar
ound for fun's sake, if you want.
Quick and dirty cheats for Descent. Haven't tried 'em all but most work fine:
Type the following directly in the game, regardless of your current keyboard mapping setup.
Here's how you can get a fully functioning version of EIAS 2.5.2 to run on your PPC.
1.) Install EIAS 252 on a 68K machine. (The installer won't let you choose whether you want to install the 68K or PPC version.) ** (see below)
2.) Apply the 68K patchers to Camers, Projector, and Electric Image. (Don't forget to increase the memory of the patchers to 10,000 k before running, or they won't work, and will wreck your software.
*you only have to do these next steps if you now want to run
this kracked, 68K version of EIAS 2.5.2. Why, you ask would you want to do such a foolish thing? Well, considering that some of the major features of EIAS 2.5 are disabled by the PPC krk for that version, this is the only way you're going to get a fully working version of EIAS 2.5.x Let's all bug all of our Krking friends to try and finish that PPC krk for 2.5.2, (and finish it so it doesn't disable any features), because the following version of EIAS 2.5.2 will be slower than a ppc nat
ive version.
3.) Run FATfree by Hubert Figuiere (email figuiere@leserveur.com if you can't find a copy on the net, and he'll email you one, I think,) on the Camera, Projector, and Electric Image applications.
4.) Install PowerFPU on your PPC.
Now you're all set.
** I think that the installer simply installs a FAT version, so it may be possible to install on a PPC, apply the 68K krks, and then run fat-free, and then be able to run the 68K version on the PPC. But you'll have to make su
re you run fat-free b4 u try running it on the PPC. I don't know if this method will work, i havn't tried it. I _do_ know for a fact, though, that if you install on a ppc, apply the 68K krks, and then try to run on a ppc (withoug using fat-free 1st) that the programs won't run, and that they will become corrupted. If anyone get's this method to work, I'd appreciate if you'd let me know about it, either on IRC, or by leaving me a msg on the board where you got this.
T"AA00001 Also needs dongle removed
v1.5.x
v2.5.2f
Electronic Workbench
W-00190-E99C
3.0ef
Email Effects
Name Sig Software
SN# 1442927399U
v1.1f
Empire DeluxeSEBypasses initial dialog - CODE 16, offset 58A4 - change 6606 to 6006 U
vAllf
Empower
Name: ADMINISTRATOR PW: ADMIN
Empower ProT
02065321
1234-0783-1234-8042-12345678
v5.0.1
v5.2.1f
EncoreT
EV30-0-01032-8582
$EV40-0-01034-4939
EV40-0-01034-2862
EV40-0-01034-2862
v3.0.7
v4.1f
Enforcer
876855327801
EnvisionT
8019U
v4.3f
Envolve
EVC610401762
EscapeS^The protection scheme is the same as that used in ScrapIt Pro 4.2, where multiplier=31 not 61.
T^name:'Anonymous', Copies:1, Code:'31-9-969'
name:'Anonymous', Copies:50, Code:'1550-450-969'
v2.0f
Escape Velocity
to EARN enough money for a Kestrel :)
Use RESEdit and open your pilot file(In the EscapeVelocity Pilots Folder)---suggest you make a duplicate first...
Open the Fork that appears.....inside you'll see pilot data and your ships data.....
OPEN the PILOT DATA fork...
Go to offset 10CB
Change whatever is there to FF
Save and launch EscapeVelocity
load the hacked pilot file and you'll have enough credits to buy a Kestrel plus arm it..:)
I take NO responsibility for destroying your pilot file, sB
o make a backup just in case...
v1.0.xf
3091300953
Estimator Plus
A 5500-9466
WD52-EB21-0023
E EtherPeekT
G2Y00ZBZKRX13CBU
v3.0f
Eudora Pro
SN: 1020145 UserCode: IC233U
v2.1.3f
Excalibur BBS Server
10021000002
0.84f
Exceed
A W -059483
Exile IIS
Exile II 1.0.1 and Exile II Editor both use the same formula for the registration key -- it is:
key=(((((rc*25)%33519)+11724)*80)%20000)+10000
where rc is the registration code given to you by the programs.
v1.0.1f
EXodusT
SE99001700022101
SEM9001009002ZJ0
SN=SEM9-0010-0900-2ZJ0
KEY=SEMQ-0010-0L00-2BM0-1234
SERIAL NUMBER ACTIVATION KEY
=================== ========================
XEM0-0110-0L0Z-0A00, XEM0-0110-0L0Z-0A00-0000
XEM0-0010-0D0W-0F01, XEM0-0010-0D0W-0F01-0000
XEM0-0110-0W0Q-0Y02, XEM0-0110-0W0Q-0Y02-0000
XEM0-0010-0G0T-0N03, XEM0-0010-0G0T-0N03-0000
XEM0-0010-0T0L-0Q04, XEM0-0010-0T0L-0Q04-0000
XEM0-0110-050M-0805, XEM0-0110-050M-0805-0000
XEM0-0010-0909-0206, XEM0-0010-0909-0206-0000
XEM0-0110-0008-0J07, XEM0-0110-0008-0BeJ07-0000
XEM0-0010-0703-0708, XEM0-0010-0703-0708-0000
XEM0-0110-0200-0R09, XEM0-0110-0200-0R09-0000
v6.0f
Extensions Strip
To personalize Extensions Strip, open Extensions Strip Control and click on the "Register this copy" button. In the dialog that appears, enter what you like into the name and/or company fields. There is no registration code for Extensions Strip. Instead of a code, a "trick" is used. The registration trick is: (1) Turn on balloon help. (2) Click three times in the code field while holding the option key down. (3) Click on the OK button.
Note: Delete the file LeecherData (a new one will be created) before you launch FC Leecher and hold down the option key when you launch FC Leecher to register it.T#Ser.#: 12345
Reg.Key: 3243809
v2.1f
FirstClass Enlink LogmasterT$FCL-0000-070-0012
FCL-0400-070-0014
v1.1.2f
FirstClass ExpressNetSdAdmin Name Admin
Site Name This Site
Server SN# 12345678
Act.Key 525366751
FlightCheckT
10002413
853Z9Y8FU
v2.6.3
v3.0.7f
Flintstone Cuckoo Clock
90500100-00nnn (n = Any Number)
FlipbookT
9401-BCDFFLGAHIU
v1.0f
Flo'T
1340U
v1.3.2f
E fMSX plusT"Name John Stiles
SN# J3LPR6SU
v1.5f
Focus VoiceCalendar
SK v2.9
Name MoonDark
Serial 999999999
Registration Code VC11821241f
FolderBolt
T+1055554
01050130
1028817
00993699
01050345U
v1.0.3f
Folio ViewT
31NFC1007413U
v3.1f
Folio Viewer
31NFC1007413
Font Box
- Set your Date to 02/07/96
- Execute Font Box
- Select "Full Version" under the "File" pull-down menu
- Enter one of the following Access Codes:
Professional Edition :136728-10767
Preferred Edition :138888-10767
Personal Edition :141048-10767
- Now it's unlocked & you can reset your Date to normal
You must set your date to 05/01/96!
008752-08924 personal edition
006592-08924 preferred edition
009904-08924 professional edition
v1.7.1
Font GanderT
Name: Buck Rogers
Serial #: T-25J2992G-2DB3U
v1.0.5f
Fontographer
Version: "4.1.2"
helpful hints: do not use caps lock for capitol letters in key #, only use the shift key. do not use the numerical keypad for the numbers, only use the number keys at the top of your keyboard. and that is not a zero in the key #, it is an "O" as in
TQKey: FM5104l3823gc527 Serial: 1104008
Key: FM1194C9779N7C7D Serial: 1100009
%Key: FM5104l3823gc527 Serial:1104008
1key # FM1125R1221O5E45
serial # 1133446
60041-0051-0016-94266
FTM410-16464-47772-19326U
v4.1
v4.1.2
v4.1.4
v4.1.5f
Form ZS
Version: "2.6.1 PPC"
If this expires you can get around it by changing:
e first byte is the length of the name, and the name is encrypted by XORing the bytes by $93.
The byte at offset $40 is the length of the organization and, the subsequent bytes are the organization itself, encrypted by XORing the bytes by $7C.
The byte at offset $80 is the length of the Serial Number, and the subsequent bytes are the serial number itself, encrypted by XORing the bytes by $E9.
The crack so that the serial number always looks good is:
cdev -4064+$56DA From: 59FF To: 5A
Now any serial number in the correct format except C34012798 will work!
The personalization information is stored in the resource 'Font' ID -4048,
which must always have a size of 148. The first byte is the length of the
name, and the name is encrypted by XORing the bytes by $93. The byte at offset $40 is the length of the organization and the subsequent bytes are the organization itself, encrypted by XORing the bytes at $7C. The byte at offset $80 is the length of the serial number a
Version: "1.1"
FWB CD 1.0.5
The personalization information is stored in the resource 'Font' ID -4048, which must always have a size of 148. The first byte is the
length of the name, and the name is encrypted by XORing the bytes by $93.
The byte at offset $40 is the length of the organization and, the
subsequent bytes are the organization itself, encrypted by XORing the
bytes by $7C. The byte at offset $80 is the length of the Serial Number,
and the subsequent bytes are the serial
number itself, encrypted by XORing the
bytes by $E9.
The crack so that the serial number always looks good is: Open it up in
ResEdit Open up the resource 'cdev' ID -4064 Change it at offset: $56DA
From: $59FF To: $5A00
FWB CD ROM Toolkit 1.0.3
The serial number for 1.0/1.0.1 doesn
t work in 1.0.3. Here
s how to crack it (or you can just use the 1.0.3 Serial Number):
The personalization information is stored in the resource 'Font' ID - 4048, which must always have a size of 148.
FWB HD ToolkitT0v1.7.5
JA130420B3I
336363C5K
v1.6PE
JA072921C5K
/00000B1Q
UA010466C3C
19064C71
21197c7i
53361C1E
wEB214344321
EB213002000
EB225002000
EB235008000
EB247007000
EB253004000
EB267004000
EB273007000
EB282002000
EB292008000
v2.0f
FWB HMS ToolkitT
AB191693999
AB125051789U
v1.0f
FWB RAID ToolkitT
00000B1Q
wNB202008000
NB217003000
NB228001000
NB231003000
NB249008000
NB250008000
NB263002000
NB274001000
NB286003000
NB295009000
GDC216345678
DC221451789
DC232568890
DC244676901
DC258784012
DC267897123U
v1.9214344321
EB213002000
EB225002000
EB235008000
EB247007000
EB253004000
EB267004000
EB273007000
EB282002000
EB292008000
v2.0f
FWB HMS ToolkitT
AB191693999
AB125051789U
v1.0f
FWB RAID ToolkitT
00000B1Q
wNB202008000
NB217003000
NB228001000
NB231003000
NB249008000
NB250008000
NB263002000
NB274001000
NB286003000
NB295009000
GDC216345678
DC221451789
DC232568890
DC244676901
DC258784012
DC267897123U
v2.0.6f
Gallery Effects
This is how you krack Gallery Effects 1.5.1
The serial number is stored in an invisible file called "Somefile" which is created in the same folder as the Aldus Gallery Effects application on your Hard Disk. Open this file, with ResEdit and edit the PLoc resource as a string... enter your very own serial number!
You may need to copy the image of the first disk to 3.5" floppy to satisfy the installer's lame system calls.
56-1000-202888264
v1.5.1f
Gallery Effects
36-1500-040049293
Game CheaterT
5020000000176U
v2.0f
Game Wizard PRO
ESD-GW-002001
2.0bf
Gamma Universe
UV0103-000-43LPBSW-6548
1.03f
GateKeeper
{Hack to stop the annoying weekly "Your version of Gatekeeper is old" alert:
(1) Open a COPY of the Gatekeeper system extension in ResEdit.
(2) Open the INIT resource.
(3) Open ID #1.
(4) Search (Command-H) for offset 08EE. It should contain the code 6200.
The entire line should look as follows: 0008E8 3380 B0AE FEDE 6200
(5) Change the 6200 to 6000.
(6) Save & Quit ResEdit.
v1.3f
GearT2G51541U99
G51542U99
G51543U99
G51544U99
G51545U99
v3.0f
GearBoxT
Name MaximumBob
Org nop
Number 123456789udqry67891904
gbx-0000-rocks-0000000
v1.5f
1000-0022-0278-1056
German Assistant
M4100441
M4102046
German Translator
45014774
GetMouse4Prog
Name MoonDark
Registration Code 22480020U
v1.2.0f
Gif Converter
62-37-77-F4-DE-A8-8B-B2
2.1.1f
Giflite
A/GL210000572
GL210000575
GL210000620
GL210000698
2.10f
E GIFmationT
UFXYEDVCKRCRU
v2.0f
Girlfriend Teri
240-104343
Version: "1.0.3"
First, I use TMON, not Macsbug (unless PPC cracking of course:). TMON has many shortcuts & can display multiple windows simultaneously. There is no real "quick" way to do it & every app seems to be different. I notice many developers go through great pains to encrypt, checksumize, etc... their s/ns - they fail to realize though that no one really tries the old hacking method to derive s/ns (trying forced sequential numbers/letters). Most often I type in somethi
ng like "11111111" and follow the code. Usually (not always), the first check is the length - whala - it wants 12 digits? OK, now I exit the app, re-enter it and type in "111111111111". Next it may (or may not) check for specific characters which need to be present. This is where I usually force the numbers in memory right before each comparison (now = "BW-1111-1111"). Now what usually follows is some code used to stop "sequential" hackers by deriving a checksum involving certain othe
r characters in the s/n. NO prob, I just try to find the end and set a breakpoint (why not let the computer do all the work:) - lets see, now it's comparing "XTYN" with characters 9 through 12. The next step is to make sure it's through. Some apps use multiple checksums - they think they would keep people like me from continuing, where it's just added fuel to the fire - I love a challenge:). Well now we know it's through, so the number is "BW-1111-XTYN". To generate more, we simply ke
ep our breakpoint set and follow the pattern, i.e., type "BW-nnnn-1111" where "nnnn" is anything and "1111" is to be determined at the checksum.
Sometimes it isn't as easy as stated above. I've run into a few s/n routines which I knew had to have been written by former hackers as they were involved and challenging. In these cases, I've gone as far as written qbasic programs on a pentium I have next to me to derive specific checksums used during s/n validation (at least it's (pentium) gooE
d for something:)
WK-07421 'Anonymous'
v1.0.3
Name :Registered
Reg# :WK-55610
Name :John Doe
Reg# :WK-6483
Name :
<---(3 <option>-spaces)
Reg# :WK-52038
47RIOS3490 (letter O not zero)
v2.x.xf
Glimmer
This one had a serial number routine which was created to prevent "reversing". It was simple and short but effective (well kinda;). It was simply:
((x mod 100) * x * (x mod 10000)) + (int(x/3) * x * int(x/7)) + $1234ABCD =
$8048DEEC or $8E3CEB4D or $1B7EE7A8
...where "x" is the correct registration code
When I first looked at it, I tried to solve for x but quickly realized following:
Algebra courses never taught us what to do with "mod" and "int" functions when simplifying equations.
' It's possible for numbers to exceed their storage size (4 bytes) and therefore get truncated on the left during the equation.
So, to create these, I had to use the "brute force" method. Isn't it great to have computers do the work for you? Luckily there were only 4,294,967,295 posibilities;)
Name :Registered
RegCode :4073724051
Name :John Doe
RegCode :4207286158
Name :=-BOOK-WORM->
RegCode :1159011725
Name :<Master Code> <---(anything can go here)
RegCode :1159028700
v1.1f
Global War
A>XE287RHXFYU
1V685NSTWDR
EG511IKYSYV
KD249BYCJKD
KB188JWPEUG
Globetrotter
Application Serial Numbers:
A000000-00
A000001-05
BKWM000-51
US English :ENG-330000
Bokmal :BOK-800000
British English :BRT-890000
Catalan :CTL-730000
Dansk :DAN-540000
Deutsch :DEU-170000
Espanol :ESP-850000
Francais :FRN-580000
Francais Canadien :CFR-740000
Italiano :ITL-780000
Nederlands :NDL-020000
Nynorsk :NYN-240000
Portugues :PRT-510000
Portugues Brasil :BRS-820000
SchweizerdeutBMsch :SDE-030000
Suomi :SUO-180000
Svensk :SVN-210000
v1.0f
GoFetch for Email T
5ZW4QCRSEAYF5D9U
v1.1f
Newton
Goldmine 1.0
10576345
GoLive CyberStudio
gopher
gopher
goldmine
goldmine
golive
golive
cyberstudio
golive
gomac
GoLive ProT)Key No. 375J854G3766
Key No. 378W857X5951U
v1.1f
GoMacT
Name: LeetCheeZ
Company: SPC
SN: 123365789112360
@12301234-345672
12301678-901244
12312345-123451
12312345-678983
v1.1f
Gopher GolfT&Name: Anonymous
Serial Number: MP-7757
&Anonymous MP-7757
MP-07757 'Anonymous'U
v3.0.4f
GPSy T
Registration Code 1$
?5c58aU
v2.2.3f
Gradekeeper
------------------------------------------------
Name/School Registration Code
------------------------------------------------
LeetCheeZ 734449
SPC 577188
Anonymous 414673
You 624777
Everyone 714025
Trial Copy 320273
577188
Anonymous 414673
You 624777
Everyone 714025
Trial Copy 320273
Name MoonDark
Registration Code 632025U
v4.6f
Grag & Thog BonkheadsT
000-220-666-456U
v1.0.2f
GraphicConverter
G13375221 ANONYMOUS
G69466831 Anonymous
G99222619 Doom
G95402852 'Reverse Engineering'
G11303318 'No One'
G45525619 'Everyone'
G58053226 'Beta Testers'
G35813218 'Mac Users'
G65086124 'Unregistered'
G88642612 'MacUser'
G93655715 'MacWorld'
G73537322 'MacWEEK'
G61503618 'MacTech'
G05424323 'Copland'
G39466218 'Gershwin'
G50795329 'Microsoft'
G19616721 'Bill Gates'
G21414625 'The Devil'
G96966646 'Rupert Murdoch'
G50625533 'The Shadows'
Name: Hackers Nest
Code: G47946023U
v2.x.x
v3.0.xf
7.0xf
Graphsoft BlueprintTE2500-26951884
2500-00009062
2500-00019822
2500-00029682
2500-BKWM5642U
v5.0.2f
Gravity Verdict Law Office
GV-940606-6996-000111
Great Plains Accounting
bookie
bookie
bookworm
stories
bookmanager
bookworm
commander
boot'r
boris
boris
filters
borland
borland
office
boxingH
brainhex
brewer's
brewer's
planner
browser
bubble
bubble
trouble
buchhalter
buddy
builderD
bundle
burn-it
buromanager
buromanager
business
butler
c-version
simply
accounting
cache
cachesaver
caffeine
calcI
calcworks
calendar
calera
calera
wordscan
caliburn
caligari
caligari
space
candy
cantax
cantax
canvas
User:MANAGER PW:ACCESS
Guitar TunerT
Name MoonDark
Registration Code GTLklU
v2.6f
Harvard Graphics
16-0300-DSET
Harward Montage
27101 0001211
Havoc
It does need a krak, but you can play without it. You need to to have at least that BigFile.dat on a mounted LOCKED disk. Not an easy thing to do is it? I got it to work with a ZIP, as well as making an image of the CD with ImageMaster.
So I made an imagemaster volume of about 107 megs and threw the following on it: HAVOC installer, QD3D folder, RB interface, bigfile.dat, rb music, world folder, and both mac joystick settings folder and sound manager 3.1 to make it complete (last 2 no ne
hearts
hearts
deluxe
helium
helpU
development
toolkit
magican
hexweb
hexweb
typograph
hhwcts
hi-cross
hijaack
hijaack
graphics
suite
hijaack
hitchcock
holiday
holiday
lights
hologate
design
homesite
hone~
hopper
host/remote
metal
hotdog
hotline
hotline
client
hotline
server
house
setup
hslink
hslink
procomm
hslink
external
grinder
hybrid
hyperstudio
hyperware
hyperware
speedkit
handsB
magic
magican
maker
management
manager
marionet
cessary). It works fine if you unmount the image and remount it locked (default). run the havoc installer to install the 4 files on to your HD and get ready to play.
Hearts DeluxeS{With Hearts 4.1, I found that if I held down
the spacebar after I started a game I could
then enter the password... X1181U
v4.xf
Helium
Name MoonDark
Registration Code 2020-3000U
v3.0f
HelpT
5840344
6949477
01-208098U
v2.3f
Help Development Toolkit
WQT7YZW6-HDK
Help Magican PRO
97304.300.001
HHWCTST?0450663264
1522110135
1516813111
4405067554
2500863631
vAllf
Hi-Cross
SN: 67657 Licensnr: 163240
Hijaack Graphics Suite
A5HJGS 3 SU CH 3YEM0WH1 HGJS 3 SU CH EB0GSWUT RYS4EKUU
still works if you set the cpu's date to 1st of August before you register
T\G10-1859-469
still works if you set the cpu's date to 1st of August before you register
vAllf
5E Hugo Plus
A%SN: 096056 Software Code: WIFR80 1094
HyperStudioT
MAA001AZT126147
oMGC010AZI601843
MGC010AZI501844
MGC010AZI401845
MGC010AZI301846
MGC010AZI201847
MGC010AZI101848
MGC010AZI001849
MGA00100V000000
MGA00123K512345
v3.0.4
v3.0.6N
v3.0.xf
iambic
iambic
action
names
bookmanager
library
reader
personal
entry
version
professional
edition
zmodem
archiver
fisher
illustrator
image
image
commander
image
image
image
imagepal
imageviewer
imagination
impact
control
indenti-filer
indiana
indiana
jones
atlantis
earning
leecher
library
lights
logmaster
lookB
handsB
magic
magican
maker
management
manager
marionet
portfolio
poser
poser
fractal
poser
posters
posterworks
power
power
powerbar
powerbar
powerdrive
powerfone
powerfpu
powerirc
powerobjects
powerpak
powerreplace
powerrip
powertranslator
powertranslator
spanish
practica
practica
musica
killer
preflight
premiere
preprint
prerelase
presentation
presenter
presenter
press
pressmarks
pressmarks
quark
presswise
prince
prince
destruction
print
print
tools
quark
printer
printshop
printshop
deluxe
Hyperware Speedkit
A SNFBBSUPD
4.91f
Iambic Action Names MacT
191A756BX7-20U
v1.1Df
IBM Bookmanager Library Reader
5799-PXY
IBM PL/I Personal Entry Version
10H7819
IBM PL/I Professional Edition
10H7848
Ice Zmodem
1306561065
1.02f
Icon ArchiverTxName: SPC
Serial #: LMIA-4598-6566
Name: <---- (three spaces)
Serial #: LMIA-7604-3871
Name sNax
Serial LMIA-8154-1646U
v2.2f
Idea Fisher
W04044-0080
IgorT
7506U
v1.2.8f
Image Commander
100SPW3H07A10380
Image Expo
arcserve
arcsolo
armor
armor
alley
arrange
arranger
art-clip
art-world&usa
artist
ascend
assault
assembler
assistant
astarte
astound
asymetrix
asymetrix
asymetrix
multimedia
toolbook
atlantis
atlantis
render
atomr
attacka
audio
audioactive
audioshop
audiotracer
audiotrack
authoring
MX161U6X813
MX10536ZV53
v2.0f
Image IN
100-05DG-0ER4
Image Q
901172
ImagePal
RNAE9-40302-01417
ImageViewer
TORegistered 4322
Anonymous 3580
JohnDoe 9648
BOOKWORM 5729U
v4.41f
Imagination
2.2.24f
In ControlT
3000-0001343-8
#v3.5 for Workgroups: 3500-9800000-1
4000-9800021-8
4000-1100000-4U
v3.5
v4.0.3 f
Indenti-filer
5581459
IE&Indiana Jones and the Fate of Atlantis
# The protection dialog will never show up - CODE 4, offset 138E - change 0240 000F 2870 to 4EBA 0230 6008
# There is a major bug in the program; on the Team Path, when you land the balloon on the "X" in the desert, the game hangs. A patch for this bug is available via anonymous ftp at umich in: ftp://mac.archive.umich.edu/misc/update/indy.foa.patch.cpt.hqx ... and at sumex in: ftp://sumex-aim.stanford.edu/info-mac/games/com/indy-foa-updt.hqx
v1.1f
iNEST
Name Buck Rogers
SN# ZYGRY7A
Name John Stiles
SN# JYHPR6S
Name Steve Jobs
SN# 3JZT8ZJ
Name: Akuma[k]
Serial Number: MRB4KF1U
v0.6.0
v0.6.1
v0.6.2
v0.7.5f
(You should find this 2 times, at Sectors 392 & 3FE)
Internet PhoneT!s/n:4073-7453-7038-446A-1D3D-7AEDU
v4.5f
cE InterNewsS
Choose the Edit menu choose "Site Default Settings...". The pull down box will say "Hosts". Hold down the Shift key and select "Registration". The check box will now be active. Check it and its registered...U
v2.0.1f
InterPPP IIT
NXNYN 9500 EKSGD 6810
NXNYN 9500 ODVDJ 0830
NXNYN 9500 JJVDH 7450
NXNYN 9500 EZRHF 6250
NXNYN 9500 HYMDF 2700
NXNYN 9500 IZLQZ 2620
NXNYN 9500 GDKSV 0340
NXNYN 9500 BBNJR 1380
v1.1.3f
InterServer PublisherT
ADQNH 9500 QXRNY 8060U
v1.0f
InTouch
0024981U
v2.5f
IQ TestT
perseveranceU
v2.0f
Ircle
Older versions:
v2.3: 1000031609
v2.3b46: 1000007815
v2.3b47: 1000032866
v2.3b49: 1000034380
We are not sure for what version this applies, but it sure does not work for the newest ones !!
The serial # is 10 digit. The last three digit is the checksum (xxx)
Serial # is always start with 10.
For example : 1067834xxx
The pattern of the serial # is abcdefgxxx (ab = 10)
The formula is : xxx = (cdefg + efgab) mod 1000
Pretend that abcde are Hex number, so the addition above is Hex addition.B
DO NOT CONVERT THE NUMBER TO HEX.
From the sample above we get :
xxx = ($67834 + $83410) mod 1000 = ($6AC44) mod $3E8 = $025C = 604
So the serial # is 1067834604
1000034380
jSaCRACK:
any answer will do (just hit twice enter):
change CODE 12 at Offset 4098 from 660A to 670AU
v1.1f
Island TrapperT
1285452565
v2.0f
Italian AssistantT
M3100579U
v1.0f
Italian VerbsT
J940311U
v1.0f
Jewels of the Oracle CD
For those of you who own the CD which only allows 4 games until you call in and get the unlock code...
1. Enter your data into the Registration Screen (use anything for the registration numbers).
2. Using TMON or MacsBug, set a breakpoint at File:Memcheck.XObj, Resource:XCODE, ID:$8D, Offset:$5AC.
3. When break occurs, part 1 of the registration# will be in DR4, part 2 of the registration# will be in DR3, and part 3 of the registration# will be in DR5.
4. Type in the "parts" in their nativB-e "hex" format into the registration# fields.
oE Jigsaw-it
7104401272
KaboomT
KBN3-310059U
KaleidoscopeSnto rid yourself of the annoying shareware message at startup:
cdev ID -4064 offset 30C8 67->66
(v 1.0 only)
AC10-M345K-VW98C-359
AC10-M345K-VW98C-359
AC10-M345K-VW98C-359 U
v1.0.x
v1.7f
Keep It UpT
User: SPC
Serial Number: 300400002300540 (Single User) -or-
Serial Number: 430000002300540 (30 Users) -or-
Serial Number: 500200002300540 (Site Licence)
v1.3.1f
Keroppi Day HopperT
4LA9-4103-S9MTU
vAllf
Key Commander
S2 v1.0
Name MoonDark
Registration Code The Eyef
Killer TransitionsT
KT1-10001-BWM19-01123U
vv.1f
King's Quest VS
the copy protection dialog won't appear - CODE 1, offset 11C6 - change F782 to 343E - CODE 1, offset 4604 - change 4E56 0000 48E7 0000 3F3C 0001 to 4E71 0C42 02F2 6600 C33C 4E75 U
any sequence of 5 keys will be accepted by the ATM and you will get your boarding pass - CODE 20, offset 2D7C - change 3B40 to 426D U
v2.2b2
Lemmings
168255
E Less TalkT
801038U
v1.0f
LetterPerfectT
F2USMLP21DU
v2.1.2f
Liason
A%40026825185
40063496992
40063576094
#40063496992
40026825185
40063576094U
v3.0f
Light Chat
685141666
953187669
914936602
Lightning CD
LC110014980
Lightning Graphics C-version
004-922-C9D00
4.0af
Liquid Speed
For 3DS 12900388760114200000
1.0.2f
ListSTAR
For ListStar for SMTP enter:
L*SM-wr8q-q7pW-Tuue-pwTW
For ListStar for POP enter:
L*P3-9w97-t3RQ-pYte-uyYW
For ListSTAR for QuickMail enter:
L*QM-u397-7rey-yrYr-epWR
For ListSTAR for Microsoft Mail enter:
L*MS-p8ye-9rYt-RyRy-ttTWU
vAllf
ListSTARS
For Microsoft Mail:
L*MS-p8ye-9rYt-RyRy-ttTW
For POP:
L*P3-9w97-t3RQ-pYte-uyYW
For QuickMail:
L*QM-u397-7rey-yrYr-epWR
For SMTP:
L*SM-wr8q-q7pW-Tuue-pwTWU
vAllf
Live PictureS
Version: "2.0"
6-8 digits long, ending with a 4
This is what was in the "2.0 key fix" file.
To get rid of the hardware lock, make the following change:
CODE ID=1, Offset +6600, change 2711 to 2716.T
HN001-01-90001
HN001-01-91437
)HA4EE-A1A2-E74C-9FDC
LA4EE-A1A2-E74C-9FDC
LBA69-31DB-E31C-0B9C
LA4EE-A1A2-E74C-9FDC
W2D52-19E4-B61E-A2B5U
v2.5.1
v2.6f
Loan Pro
SouthSide
642448974
User Name :Registered
Registration #:724850384
User Name :John Doe
Registration #:496500717
User Name :
<---(3 <option>-spaces)
Registration #:423174871
User Name :=-BOOK-WORM->
Registration #:615913923
736023205 Name:'Tom Brannon'
v1.7.5f
E LocalPathT
21306259915U
v1.0.2f
E Locksmith
A LOCK-1000
1.31f
Log WatcherT
Name MoonDark
Registration Code 2216914381U
v1.1.4f
Logic AudioT
6447374U
v2.5f
Logitech Mouse
MBAI 013904T643
6.43bf
Logo CorrectorT
210342-5733U
v2.1f
LogoMation
Name :Registered
Serial # :905-451-1686
Password :36K-95F
Name :John Doe
Serial # :905-451-1686
Password :KFD-A79
Name :
<---(3 <option>-spaces)
Serial # :905-451-1686
Password :843-DJR
Name :=-BOOK-WORM->
Serial # :905-451-1686
Password :TBP-D24
v1.1.2f
LogoMotionT
04-5320-2590U
v2.0f
Loony LabyrinthT21409LLM123456-U1
4880LLM234567-U1
9269LLM106162-U1U
v1.02f
E Lotus 123
2350016-38419880
Lotus Approach
1F00028-01104360
Lotus Data Access Tools
1F00028-01104360
2.0af
Lotus Organizer
1F00028-01104360
Lotus Smartsuite
1S10015-08473222
E Lotus VIP
1F00028-01104360
LXR TestT
1500B
1000BU
v5.0.10
v5.1f
Mac 2 PC Pro Plus
123456-1234
Mac 2 PC Pro PlusT
123456-1234f
Mac 3000T
4861U
vAllf
Mac Recorder Sound System ProT
MSP100-14260
MSP100-27431U
vAllf
lotus
approach
lotus
access
tools
lotus
organizer
lotus
smartsuite
lotus
luminous
recorder
sound
system
restart
mac320
macattack
maccaller
maccaller
maccomcenter
macdos
macekg
macjanet
mackali
mackennel
maclabel
maclabel
maclan
maclan
connect
maclink
macmath
macmath
macmod
macmod
macnfs
macopener
macpassword
macpipes
macplay
macplay
macplay3
macro
macro
model
macromedia
macromedia
director
macromedia
flash
macromedia
macromind
macromind
macromind
director
management
manager
marionet
Mac Restart
T/Name MoonDark
Registration Code 206862428U
v2.0f
Mac320T
SB23-0015-0057-1800U
vAllf
MacCaller IDT
S2 93 0C 12P
LeetCheeZ
L5 279 0Z 36E
Y2 93 0U 12O <--- *note* this is the ONLY 'oh' in ALL of the serial numbers, all the rest are ZEROs.
also, there are spaces between the sets of digits - make sure you enter them in!!U
v1.1.3af
MacComCenterT
1.3.2 1.018.478-BU
v1.3.2f
MacDosT
0000036568
4294930727U
v1.0.1f
MacEKGT
12345Z9L2416U
v3.0.1f
MacKaliTBSerial#: 920dea047805
SKEY: 5cab31531c7e
Tkey : 261207711224
vAllf
E MacKennelT
MK20084U
v2.1f
MacLabel ProT
5117081730U
v1.6.4f
MacLan
208196-6F49A077
208197-766C19D0
208198-7D8E9329
208199-7B4EF37E
208200-39909E91
208201-40B317EA
208202-47D59143
208203-4EF80A9C
208204-561A83F5
208205-5D3CFD4E
5.51f
MacLAN ConnectT
SN302657-74DE3B0FU
v6.0f
MacLink
00823013-6398
612159-5575
1302075-2985
1931901-2396U
v8.0.4
v8.0.6i
v9.0f
MacMath ProT
Password "Psalm of Life"U
v2.7.6f
MacMod ProT'013953150
070185726
133209756
700182795U
v3.2.2f
MacNFST
XI44-C01-7GV-TS7-V3HU
v1.0.1f
E MacOpener
2207860-5791
E MacOpenerT
2207860-5791 U
v2.0f
MacPassword
Use ResEdit to change the CODE resource ID 2 of the MacPassword Utility at: offset $07D4 from 0C6E to 3D7C, and:
offset $07DA from 663E to 4E71.
Save changes, quit ResEdit, open the program and any keycode, for example 1234567890, will be accepted in the "Personalize" dialog.
v4.1.1f
MacPipesTdSPC
HETCKWJCVXAX-0730
LeetCheeZ
WUSADSTDWJ-111811
Anonymous
WUYSNSJDYWJ-31382
AEOCKWJCVXAX-0030
Name: MoonDark
Registration Code:
KELCXWECXCCGWI-00U
v2.2.2f
E MacPlay 3
Tc100011-301000-5000
To call up the registration input dialog box click on the "
" in the about box.
v0.99f
Macro Model
0428-4079-2071
Macro ModelT
MM150-GC-10997
MM150-AB-11618U
Macromedia DirectorT
DRW400-1895-9074-2077
55777-37077-29378U
v5.0f
Macromedia FlashT
FLD200-02860-67071-83453
FLD200-02860-67071-83453U
v2.0f
Macromedia XRes
t50020-0040-4492-15201
50020-0023-0007-54189
50020-0048-0016-75183 50020-0073-0013-03894
50020-0509-0166-10804 (beta)
50020-0023-0007-54189 (release)
50020-0048-0016-75183
50020-0073-0013-03894
50020-0093-1123-21144
50020-0153-0050-36821
50020-0383-0124-02054
50020-0509-0166-10804
50020-0536-0173-26154
50020-0571-0183-92768
50020-0685-1337-85281
50020-0040-4492-15201
500-07377-17072-89453
REM300-10058-87782-19326U
v3.0b
v3.0f
MacroMind 3D
T/T100-12407-CPU4
D300-31239-CP4U
T120-12345-CP4UU
vAllf
MacroMind Director
Version: "4.0.4"
MM Director 3.x:
No Serial Number* No Name
CODE 12 "INIT", Offset 44E
6600 012C -> 6000 012C
MM Director 4.x:
No Serial Number* No Name
CODE 56 "INIT", Offset C74
6600 0096 -> 6000 0096
MMD 4.0.4 The serial # is the same as for 4.0, except replace DM400- (or DRM403-) with DRM404-
MacroMind Director 4.0.3 & 4.0.4
Version 4.0.3 & 4.0.4 start with "DRM403" & "DRM404" (includes "R" after the "D").
The 4.0 versions did not use "R" as their second character & therefore aB
re O.K.
Version: "4.0"
The installer for Director 4.0 requires that the installer file be named 'Director 4.0' and the other files are: Director 4.0.2, Director 4.0.3, etc to Director 4.0.10 - this will then install from any disks or hard drive.
EFFECT: This change allows the setup code to run and will present the (randomly occurring) question dialog. Hit the "OK" button to continue with the game, the password is now ignored.
HOW TO: Locate CODE resource #3
Change WORD at offset 5F00 from 660A -> 6054
To change dialog box:
Locate DLOG resource #1015
Open Item #1 -> Change name from "OK" -> "Ignore Question" Change ToB
p -> 140 Bottom -> 164
Change Left -> 16 Right -> 133 - MACSKI V1.0.1
EFFECT:The program will never ask you the question. HOW TO: Locate CODE 3, Find offset $5E76
Change the word $661C to $600C
vAllf
MacTEXT 00229.002U
vAllf
E MacWebCamT$User ID :Registered
Password :4957
v2.4.0f
E MaelstromT
FOKBKHOE Copies:10 'Anonymous'U
v1.4.3f
Magic
15002688
1.33f
Magic SeparatorT ISTR-0100
v3.1.4f
E Magna RamT
s/n:122-28B-66138U
Mail ArchiverT
9BA-b5D-AF2-DbU
v1.0.1f
E ManageProT
AFDSJH220231U
v2.0f
E Mannequin
10012345
Maple VT
MAC-5303-951412-1U
v3.0f
MapLinxT
000000U
v3.0f
Mapple V
DOS-5203-676023-1
Marathon
T429715FNNZBCZEYX (net)
4EMUDZ528RDKGC1Y (net)
F8S6Q5KVEDCES4YD (net)
X61SGC4ANZB7881X (net)
8M2K4VGB7PALXX28 (full)
GVFHNPJ1S3NS4V2E (full)
MSK9TJSCVNVYKGEN (full)
RTQJKYJ1M6PKLXBR (full)
46D3FZCV6Z7NN889
8JC8CY7M7ZNLQDZV
EMNRMPVCMPLDDXX6
GDSA4325FSF53AQQ
GG6L2JMD7PAVPYE8
GTACPPMCGPP6KXC2
PES3S5CFZPBPTC3Q
RJNLNV7GM1A9LDRE
ZVKRKJVMJZAZQVRT
v1.xf
Marathon II
o{)J-k-k)J-k-k
J2Nsg9
BkZ)JJRg9
%))J-l5
B%)-k
Bg9Ns
JRNs5
-Kg9JR
s|gZ
!g9Ns
-k)J-k)J1
S11NUC7TJJ98M7F4
ZVKRKJVMJZAZQVRT
69T855MYZ59V1Y4Y
DQ2GMY456KTA9EA2 - Net
x1rk3g9s22ggbszh -- full
843sr46kg144akpu -- serial
GJ88KJ7B8TAUED2T (net)
F8S6Q5KVEDCES4YD
LBTNZ8RPR5UKS179 -- full
MSK9TJSCVNVYKGEN
41DEQM1V6S1HYSFB (Full)
2YJ8G5M6VL93USF4 (Full)
1C5X4JF9E76RHKMG
DF5UMNZQZ76NCCUT
C45A9NZEZJ6PFKUE
535VMAAKZGSA54U2
K45GM3AZZJ23FLGE
AYDC657SZTM63DT1
BCNV9JLKJQF9RNQ2
vAllf
Marathon InfinityS
Just a reminder the Full sn# lets you play both the solo play and network, the network sn# only lets you play networked, no solo play, if you accidentally install a net # simply delete
Shift-Option-Control keys held down while typing them to activate:
COLDMISER
DORCS
ENOLAGAY
TLOFRONT
ICANTHACKIT
IDKFA ---Try this one :-)
MICHELIN
MIGHTYMOUSE
BLORB
TINKERBELLU
v2.0f
E Media 100T
78912365f
Media Cleaner DemoT
Unlock Code MCD17A89G20FU
v2.0.1f
Media Studio
NNAEA-40721-02586
MediaMakerT
1987-1065-3071U
v1.5f
Meeting Maker XP
mechanic
media
media
media
cleaner
media
studio
mediamaker
meeting
meeting
maker
meetme
megaphone
monitor
montage
morpher
mouse
multimedia
mystp
namesl
netware
network
nfs/share
noise
notebook
office
onlineU
optimizer
oracle
organizer
osf/motif
packq
pagemaker
pagemill
perfect
perform
personal
persuasion
pharmacy
phone
photo
photodeluxe
photopaint
photoshop
picture
pinballC
plains
planner
memory
mentor
mentor
flite
menuette
messenger
metaflo
metal
microfocus/370
microfocus/370
assembler
microscope
microsoft
microsoft
excel
microsoft
flight
simulator
microsoft
front
microsoft
microsoft
great
greetings
microsoft
publisher
microsoft
intellipoint
microsoft
money
microsoft
office
microsoft
office
microsoft
planner
microsoft
microsoft
return
arcade
microsoft
visual
basic
microsoft
visual
microsoft
microsoft
works
photo
photodeluxe
photopaint
photoshop
picture
pinballC
plains
planner
After you install the user serial number for 10 users and you make the printout to fax in order to get Meeting Maker to work for longer than 90 days (DON'T actually fax the thing in!!!), you will see a number at the bottom of the printout by the words "authorization code". This letter sequence corresponds with another series of letters you have to enter to enable the entire package. Four of the possibles are:
For Authorization Code: GBZY, type in SRSL
For Authorization Code: SKHG, type inB
XYBB
For Authorization Code: MRGE, type in AHTR
For Authorization Code: MTXH, type in LYLT
Keep printing till you get one of these four and you got it. Better crack is wanted, of course!
T-B8ST-EP315-WJ5C1
ZGUT-EP315-VJ5C1
(ten user)
v3.1.1f
MeetMeT
75013 PARISU
vAllf
E MegaPhoneT
Serial Number:
AAA-AACV-CJF-7PM8-B693
Access Code:
AFG-VHFT-C6Q-1DWH-BFGR
Activation Code:
03599055252504509062U
v1.0.2
v2.0f
MetaFlo
14648
15028
19131
2106737
2113107
2119234
2120247
2120471
227512
228433
230918
234512
234711
235351
2387332
2393312
2393474
2393544
25783
26650
3550857
3552499
3553275
3558496
45812
45940
46676
48021
49377
525911
526546
527306
527648
5717803
5723288
5724474
6228939
6389921
6391226
6394654
6457118
6460828
6462384
749435
753853
760847
761431
762978
764200
832933
833624
834083
836077
837482
839379
1082300438
1118837526U
v1.2.6
v1.2.7
v2.0f
MGM CadT II 220301U
v2.5f
Microfocus/370 Assembler
URNB0UPP/000000000
3.1.16f
Microscope
MS-1231393
5.06f
Microsoft ExcelT
33610-062-0103145 (UK Version)U
Microsoft Flight SimulatorT
00-030-0400-42276394U
v4.0f
Microsoft Front PageT
s/n:2556-0000000U
Microsoft Front PageT
s/n:2556-0000000U
microstation
microstation
microworld
might
might
magic
clouds
mightyr
miler
miner
minicad
minitab
mirage
mirage
raytracing
engine
studio
mitemview
mobilemath
modedit
twork
nfs/share
noise
notebook
office
onlineU
optimizer
oracle
organizer
osf/motif
packq
pagemaker
pagemill
perfect
perform
personal
persuasion
pharmacy
phone
photo
photodeluxe
photopaint
photoshop
picture
pinballC
plains
planner
frontdoor
frontdoor
request
processor
share
fundamental
funkeys
fusion
fusion
futuresplash
futuresplash
animator
toolkit
toolkit
toolkit
toolkit
gallery
gallery
effects
cheater
wizard
games
gamma
gamma
universe
gander
gatekeeper
gearbox
geopublish
geopublish
graphic
windows
environement
german
german
assistant
german
translator
getmouse4prog
converter
giflite
gifmation
girlfriend
girlfriend
glidel
glimmer
global
global
globetrotter
globetrotter
dictionaries
go-cr
gofetch
gofetch
email
goldmine
Microsoft GolfT
00-000-00186-052V100U
v2.0f
Microsoft Great Greetings
32521-082-0109954
v1.0f
Microsoft IntelliPoint T
37991-025-0514927U
v1.10f
Microsoft Money
00-105-0200-99999979
"20342-066-0023392 (German version)U
Microsoft Office Pro
28779-051-0101444
27716-102-0128344
v4.3c
Microsoft Planner
076-051-090
Microsoft Plus
411-3721404
Microsoft Return to ArcadeT
CD-KEY: 415-1712656
411-0356356f
Microsoft Visual BasicT#24510510868111338206 (Professional)
411-1454815 (Standart)
s/n:411-0356356
040-1111111
Works for all EditionsU
Microsoft Visual C++T
040-1111111
415-1712656
220-123456U
Microsoft WordT
32857-113-0137987U
v7.0f
Microsoft Works
16429-020-0000284
CD-KEY: 425-0977766U
3.0 NL
MicroStationT
1669548699
1054679705U
MicroStation CAD
88193000085
MicroWorldT
S5RTBQ62BYU
v2.0f
Might & Magic Clouds of XEEN
Clouds of XEEN 1.1 - 68k Crack
Code 11 Offset +404E
Change: 3B40 9C8A 4A40
To: 7000 3B40 9C8A
And at: Offset +4058
Change: 660C
To: 4E71
Clouds of XEEN 1.1 - PPC Crack
The check for the CD ROM is in the DATA FORK
(use Resorcerer)
At: Offset +6AE74
The CD Name is given here as World of XEEN
The byte in front of this '0D' gives the length of the title
Pick any CD that you own with a name UNDER 13 characters long.
This both cracks the program and removes the network check.
==========
Forget the install process... Copy the d
isk files to your hard drive and extract the files yourself & put into a folder (files from disk 1&2 have to be done this way, the other can be run on their own), now in the application change:
CODE 10+$000E From: 67 To: 60
this works and gives me and registered to blank, serial #.
AE(edit Autopgp.cfg) Mykeyid=Your Name 742542-123 293958-321 964030-000
2.22f
force
forces
fortran
fotoflow
fototune
foxbase
fractal
fractal
detailer
A)CBG6630 Reg Nr: E140093278160173CCM
A CXX3330 Reg Nr: D736448223589BHM
A"CYG4530 Reg Nr: V22288628612817TBP
CM*2330 Reg Nr: F376971311DDMK
OLX Off-line Xpress
44-4444
OmniformT
3501A-C00-002106U
v2.0.1f
OmniPage ProT
2801G-%001327
0102E-%001705
0132A-%002643
0102E-%001705
0132A-%002643
2801A-C00-064596
0102E-%001705
22801a-c00-091108
p/n 872-1221-010 rev a
06244393
ser#: 2801a-c00-091108
reg#: 06244393
v6.0 Pro
v7.0f
OmniPage Pro
2804B-C000003700 872-0734-020
5.02f
v60b2
v753s6c3
v806i
valias
vbeta
vdemo
vpro11
workgroupv
Omnis 7
How to Create Omnis 7 v3.2 Serial Numbers
Format:
XXXX NNNNNN ?????
---- ------ -----
^ ^ ^
| | |
| | |
| Any 6 |
| digits |
| |
| |
| Checksum
| (see below)
CMDS (Mac Developer)
CPDS (PowerMac Developer)
CMXQ (Mac Runtime)
CPXQ (PowerMac Runtime)
How to Find the Checksum:
1. Install Omnis, using a valid s/n like "CMDS 000000 60889"
2. Using ResEdit, Open STR#
ID = 1040 from "Omnis 7" and
change offset $45-$48 to CMDS, CPDS, CMXQ, or CPXQ (see above).
3. Now change offset $4A-$4F to any desired 6 digit number and save it.
4. Load your favorite debugger and set a TRAP breakpoint for _InitGraf.
5. Execute "Omnis 7" and when the break occurs, set an additional
breakpoint for CODE $8, offset $C6 of "Omnis 7".
6. Continue execution and when the breakpoint activates,
the Checksum will be in register D1.
7. Convert
the Checksum hex number to decimal and write it down.
8. Exit to the finder.
9. Using ResEdit, Open STR# ID = 1040 from "Omnis 7" and
change offset $51-$55 to the Checksum you wrote down and save it.
All Done!!!
Examples:
=========
CMDS 000000 60889 (Mac Developer)
CMDS 000001 49156 (Mac Developer)
CMDS 000002 51122 (Mac Developer)
CMDS 000003 25257 (Mac Developer)
CMDS 000004 06951 (Mac Developer)
CMDS 000005 43852 (Mac Developer)
CMDS 000006 92290 (Mac Developer)
000007 11021 (Mac Developer)
CMDS 000008 63760 (Mac Developer)
CMDS 000009 54599 (Mac Developer)
CPDS 000000 96347 (PowerMac Developer)
CPDS 000001 30500 (PowerMac Developer)
CPDS 000002 51254 (PowerMac Developer)
CPDS 000003 31273 (PowerMac Developer)
CPDS 000004 15399 (PowerMac Developer)
CPDS 000005 61581 (PowerMac Developer)
CPDS 000006 32962 (PowerMac Developer)
CPDS 000007 11087 (PowerMac Developer)
CPDS 000008 66768 (PowerMac Developer)
CPDS 000009 58823 (PowerMac DevEPeloper)
CMXQ 000000 12741 (Mac Runtime)
CPXQ 000000 48397 (PowerMac Runtime)
v3.2f
Omnis 7
A&CWRS270836
20251
7WDI
108844
18592
On Guard
1.5.2
No sn is needed, but to log in as the startup user, enter "administrator" in the name field and "admin" in the paswd field. Then you can change what options you like. I'm using it now, seems pretty good, and much more compatible than, say, Fileguard...
G2345678901236394113U
1.5.2
On The AirT
OTA100AAA00000118U
v1.0f
dE OnslaughtT
df4330t7c8n3U
vAllf
OptiMemT
AVFA-SHAA-LLAO-LBPUA
SNZTA-WHQD-BJAE-ODQYB
OSOA-PFID-TOAU-GAJRB
OTNA-QGQD-UEAD-OCKSB
NENA-BOHD-GFAC-FOVDB
>ACPA-ZACA-UAAJ-AAWBB
MUZM-TMOM-QMMH-MMEHB
ZUMZ-TZBZ-QZZH-ZZRUBU
v1.5.6
v2.1.2
v2.1.4f
OracleS3Name: Buck Rogers
Copies: 100
Serial #: MCCBGPNDU
v2.1f
Oracle PowerObjectsT 595282HOZU
v1.0.4f
OrderMasterT
SN# OMV1961081
Password AthenaU
v1.1f
iE Orniwell
Name MoonDark
"Registration Code 487604326098U
v3.0.6f
OS/2 Warp 45 Day Test CD-ROM
1) BOOT MS-DOS (NO DOS-TASK !!!) 2) GO TO THE CD-ROM DIRECTORY \DISKIMGS 3) INSERT A FLOPPY AND \MAKEDSKF DISK1_CD.DSK A: 4) DELETE THE FILES FROM C:\OS2\DLL DOSCALL1.DLL KBDCALLS.DLL VIOCALLS.DLL 5) COPY THESE FILES FROM THE DISK A: TO C:\OS2\DLL : DOSCA
Ouside View
organizer
orniwell
cd-rom
osf/motif
ouside
ouside
outside
outside
outside
packq
inspector
pageboy
pagemaker
pagemill
pagenow
pagespinner
pagetools
paint
paint
alchemy
painter
painter
fractal
painter
palace
pandoras
pandoras
panorama
panoramic
panoramic
utils
pantone
pantone
colordrive
paper
perform
personal
persuasion
phantom
pharmacy
phone
photo
photodeluxe
photopaint
photoshop
picture
pinballC
plains
planner
plant
warrior
watcher
waterloo
waterloo
macjanet
convert
wealthbuilder
weather
weather
tracker
weaver
arranger
webanimator
webburst
webquick
win/win95
wincom
windows
wintest
wizard
words
wordscan
workbench
workflowm
works
workshop
writeY
writer
x-men
xpress
zmodem
AB9321-526 18VS48-391
Outside In
OW218312364
2.1gf
Outside View
AB9321-526
18VS48-391
Here are the first 2nd to 11 level codes:
2) 218780766 3) 10232399 4) 32882199
5) 13794470 6) 28197802 7) 17887807
8) 51761122 9) 83882268 10) 6071220
11) 58037867
Oxyd Patch
Here's the patch I found for removing the Oxyd CP. Maybe it can be added to
the new Cracks and Numbers file?
OXYD 3.4
Depending on which version you want to run (B&W or Color) you need to
alter the appropriate Data A file. (Note: this only works with 3.4; I
have no idea if it works with 3.3)
*NOTE: you require a Disk/File editor such as Norton Disk Utilites
rather than Resedit because you are editing the Data fork not Resource
fork.
EFFECT: This patch allows you to enter in the level number you want to
play,
instead of the annoying 'secret code'.
Data A Color +$0001BC48 (#113736):
Data A Mono +$0001C18A (#115082):
change: 6F6E DEC8 FFFD D823 to 614A 0080 FFF7 CFFA
and
Data A Color +$0001BC5A (#113754):
Data A Mono +$0001C19C (#115100):
change: 4CFF FFF6 to
CFFF FEFA
Now you can just enter in the level number you want to play (preceded by
the appropriate number of 0's, so level 12 would be 00000012).
EFFECT: This patch allows you to press any key to remove the 'magical
tokens'
which block your path.
Data A Color +$0002C9F6 (#182774):
Data A Mono +$0002CF36 (#184118):
change: 669F to DE43
Data A Color +$0002CA22 (#182818):
Data A Mono +$0002CF62 (#184162):
change: 669F to DE43
Data A Color +$0002CA4E (#182862):
Data A Mono +$0002CF8E (
#184206):
change: 669F to DE43
OXYD 3.4
Depending on which version you want to run (B&W or Color) you need to alter the appropriate Data A file. (Note: this only works with 3.4; I have no idea if it works with 3.3)
**NOTE: you require a Disk/File editor such as Norton Disk Utilites rather than Resedit because you are editing the Data fork not Resource fork.
EFFECT: This patch allows you to enter in the level number you want to play,
instead of the annoying 'secret code'.
Data A Colo
r +$0001BC48 (#113736):
Data A Mono +$0001C18A (#115082):
change: 6F6E DEC8 FFFD D823 to 614A 0080 FFF7 CFFA and
Data A Color +$0001BC5A (#113754):
Data A Mono +$0001C19C (#115100):
change: 4CFF FFF6 to CFFF FEFA
Now you can just enter in the level number you want to play (preceded by the appropriate number of 0's, so level 12 would be 00000012).
EFFECT: This patch allows you to press any key to remove the 'magical tokens'
which block your path.
Data A Color +$0002C9F6 (#182774):
Data A
Mono +$0002CF36 (#184118):
change: 669F to DE43
Data A Color +$0002CA22 (#182818):
Data A Mono +$0002CF62 (#184162):
change: 669F to DE43
Data A Color +$0002CA4E (#182862):
Data A Mono +$0002CF8E (#184206):
change: 669F to DE43
OXYD Magnum! 3.5
# Allows you to enter the level number you want to play instead of the secret code (when entering level, pad with zeros to make 8-digit code (e.g. 00000012)) - open "Data A Color" or "Data A Mono" with Norton's Disk Editor - search for D855 80D4GS ED58 DBD4 E9DA (offset $00016C8A or $000161CA) change to 68FF EF6E E49F EF70 D845
0006 - CODE 5, offset 4BFE - change 3228 0006 48C1 to 7200 3228 0006 - CODE 5, offset 4C28 - change 3228 0006 48C1 to 7200 3228 0006 # Allows save anywhere, not just at a save rune - CODE 2, offset 0706 - change 6716 to 6516 ? Gives whatever weapon you have unlimited ammo - CODE 6, offset 5952 - change 6774 to 6074 ? increase healing rate by a factor of six & adjust internal game time to compensate - CODE 7, offset 2404 - change 0006 to 0002 - CODE 7, offset 3410 - change 6270 to 20D0 - C
ODE 7, offset 2608 - change 6270 to 20D0 - CODE 7, offset 2618 - change 6270 to 20D0 - CODE 7, offset 262C - change 3138 to 1068 - CODE 7, offset 263A - change 6270 to 20D0 - CODE 7, offset 2C0A - change 0006 9780 to 0002 3280 - CODE 7, offset 2C16 - change 0009 E340 to 0003 4BC0 ? increase maximum health points accrued based on treasure picked up - CODE 6, offset 2210 - change E588 to E788 - CODE 6, offset 221C - change 003C to 0064 ? increase efficacy of Violet Potion by x4 - CODE 6, off
set 230D - change 3C to 0F ? increase game speed by removing multiple key checking - CODE 1, offset 0352 - change C046 to 4240 # a special "Terminator" set of saved games (1500 hp, lots of weaponry, extra crystals, etc) is available from me by sending some mail to my address, geoff@tara.apana.org.au
Pathways Into Darkness 2.0 (PPC)
bypasses manual-look-up - open the data fork with a sector editor - offset $000184D4 (# 99540) - change 4182 02EC to 4800 02EC - offset $0001B55C (#111964) -
change 4180 0030 to 4800 0030 ? activate hidden 'turbo' modes - during game play, hold down Control and type: - turbo (puts game into high speed) - carnage (shows 'score' screen) - reset (resets time-elapsed clock)
Pathways Into Darkness 2.0 (68k)
bypasses manual-look-up - CODE 1, offset 0396 - change 6D to 60 - CODE 2, offset 10C4 - change 67 to 60 ? activate hidden 'turbo' modes - during game play, hold down Control and type: - turbo (puts game into high speed) - carnage (extra monst
G*ers?) - reset (resets time-elapsed clock)
v1.0f
PC Anywhere
PCDH4543IN
PC Board Professional
29617
15.21f
PC Buchhalter
8848 5060295
1.01f
PC Doctor for DOS
2104328220
E PC Doktor
1139610360
Focus 6.01 NL
1732221
PC Miler
W410626
PC Tools
11-50-01415
2.00f
PC-Express
AH(edit EXPRESS.KEY) Line #1: 904309038 1941650006 1365124106 -1746626551
PC/TCP Network
A'SN: 1990-1025-7300 Key: 3751-6732-9871
doktor
doorway
dosmounter
doubler
doublescroll
download
download
deputy
download
deputy
deluxe
download
mechanic
salomon's
antivirus
toolkit
strip
dramatica
dramatica
drawP
drawtools
dream
dream
solver
summer
edition
dreamrom
drive
drive
drive
rocket
utility
driver
dubbing
e-mail
PCKwik Powerpak
5062180192V09
5062736300U10
Peachtree Complete Acconting
9005635
9006193
E PeekLimitTA196334 (note: you must leave *all* of the other fields blank!)
v1.0f
PeglegT
8-AJ-3122-NHA-8
8-AJ-3122-NHA-8
4-AD-3322-NRK-2U
v1.0.4
v1.0.5f
Perfectview NL
PV-PAC61-260159
6.10f
Personal Time & BillingT
123456789012Q 000000000000Wf
Newton
PersuasionT
09-2101-200613117
09-3003-202849134U
3.0bf
PersuationTK08-3004-202794550
08-2009-000379488
08-2001-200201529
02-3008-000036469
v3.0f
PGA Tour Golf II
persuation
phantom
pharlap
pharlap
extender
pharmacy
phone
phone
phonebook
phonebook
phonenet
phonenet
photo
photo
magic
photobot
photocaster
photodeluxe
photofix
photogif
photomatic
photopaint
photoshop
photospot
photostyler
phototools
phrasea
phrasea
image
database
physik
picture
picture
publisher
pinballC
pixelpaint
pixelpaint
plains
planet
planet
color
planet
planner
plant
player
player
playmaker
playmaker
football
plug-in
pmcomm
pmcomm
pocket
PGA Tour Golf II 1.0
Any answer will work in the length dialog box. - CODE 4, offset 45CC - change B26E FFFE to B241 4E71 ? Cheat to hit a driver 500 yards - at any time, type "abbacab" U
Pharlap TNT 32 BIT DOS Extender
30875
E Phone ProT
AZ10035531U
v2.0f
PhoneBook Plus
Last Name :Registered
Password :VDVEEMXDNVIMGM (or IOKTLER97OTE1T)
Last Name :John Doe
Password :SNIJQLZXKKZWB (or O7KKE32FMI5I5)
Last Name :
<---(3 <option>-spaces)
Password :VQUPLLTOCYEAI (or X8VBFUIIPBOT9)
Last Name :=-BOOK-WORM->
Password :DIFFERZDMQQH (or DMAGZZDT34M6)
v3.0.4f
PhoneNet PC
3022152-2F82
Photo Magic
PH1001LXX-04526
PhotobotT
PBMC@B094@XCPX4U
v2.1.1f
PhotoCaster
ultra
pinballC
website
builderD
3dsmax
4-sightF
4-sight
4-sight
manager
backupG
boxingH
calcI
chartJ
classic
runtimeK
compilerL
compiler
connectivityN
developerO
drawP
engineQ
firstR
insiderS
internet
toolkitT
online
helpU
runtimeV
writeY
dimension[
right
term^
tuner_
deluxe`
94/95
a-10a
attacka
cubab
aaron
flowcharterd
toolkite
abovef
above
diskf
accent
accessh
PhotoCaster 1.1.1 S/N I derived "021105" only works if you have used the Hacker's Helper S/N of "DRM500-50272-87072-29378" for Director.T
AT(edit QPEG.REG) Line #1: Oere - Okware Line #2: 2C-D05940F512345678804704956DF1A2C4
1.4bf
QPictT
SN#
The Shark
34396946U
v2.2f
QPV/386
(make Txtfile Qpeg.reg And Put This File In Your Root/path But Not In Your Qpeg Directory) Line 1#: 62RE- QPV/386 V1.6c Line 2#: 40-E9D70E3D12345678B9C94A5D31BC1223 Line 1#: F9RE- YOU! Line 2#: 73-45EB9D1B1234567815F5D97B8FEB2446
1.6cf
QuarkXPress
(With EFI) WX-12572277
QuarkXPress
** TIP **
Use a number that you know works and add 107 to it.
If you replace XU with XM the installer accepts the SN and I believe installs
a multi-user version.
QuarkXpress Network Bypass:
(as of 6/29/91)
For each additional copy you need to run on the network do the following:
- Make a copy of the original program.
- Open the copy with ResEdit and open the DATA resources.
- Now open the DATA ID 0 resource.
- Search for the string QuarkXPress (check spelling and case).
- The next ch
aracter after the string is a "<" symbol.
- Change the "<" character to the character "1" for the second copy you want
to run on the net and to "2" for the third copy and so on.
- Now close ResEdit and save your changes.
NOTE: For each additional copy you want you MUST make a copy of the original
to modify. That should get you on your way to lots of copies on the net.
also any serial numbers from the gamma should work just change the first two
letters to XU instead of XG
serial number
Quatro PRO
1F945C10098127 IA935A10031893
Query
5622-118
Quick EditorTVName: Anonymous Address: World SN: 1430
Realmz IceCrack from Hackers Nest can crack most versions of Realmz Game engine and all Scenarios. The IceCrack is provided with the "Hackers Nest map to heaven" pack
For Those who want to try serials instead of the IceCrack:
Realmz 3.1 To register Realmz enter 911 as Registration Code in the About Box and click on Register. Then you will be asked for a Serial Number, which is 13579246. After this enter 8487119 as Registration Code, click on Register, type in a name of your choice and yo
snoopy
pack@
apple
network
administration
toolkit@
boom@
chessmaster
2000@
corel
print
house@
desktop
color
manager@
manager
fasttrack
schedule@
flowchart
maker@
getmouse4prog@
golive
cyberstudio@
havoc@
jewels
oracle
hands@
maccaller
microsoft
front
page@
microsoft
publisher@
might
magic
clouds
xeen@
network
scout@
pathways
darkness@
prince
destruction@
ramcharger
syncronis@
snapz
spellswell
square
taylor@
ultrafind@
zephyrpalettes@
operty
manager
sesame@
snapz
sndplayer@
spss@
supercard@
underwear
girl@
virtus
walkthrough@
reader
ready
realaudio
realaudio
reality
realmz
realplayer
realplayer
rebel
rebel
assault
recognita
recognita
recorder
baron
reduction
regognita
regognita
go-cr
remote
remote
access
remoto
remove
remove
property
manager
remus
return
reunion
right]
rocket
runtimeK
salomon's
saver
schedule
scholar
scout
screen
screensaver
security
separator
series
serverW
setup
share
sidemill
simplyi
simpsons
simulator
sketch
smartserverX
smartsuite
snoopyq
soccero
socket
solutions
solver
songbook
sound
Use IceCrack 4.1 or newer
Use IceCrack 4.3.3 or newer
Use IceCrack 4.4.3 or newer
Use IceCrack 4.4.4 or newer
Get your self a diffrent versionU
4.0.1
4.2.2
Otherf
Cracking '96 - An Introduction, using Realmz 3.0.1
by The Morrin Hackers
edited and with annotations by Mr. Wood for educational purposes only ;)
Part One:
Cracking Realmz, the Game registration only.
Introduction:
This is a quick tutorial to crack Realmz 3.0.1. It shows basic assembly and some simple cracking ideas in 1996. The Crack is by Morrin Hackers, as is this document. With all due respect to Fantasoft, the creators of Realmz, it is a great game; I cracked it and wrote thi
malani ? Activate "Yoda's Power Mode" - go to Game Options - hold down the shift, control, option and command keys - triple-click on the space *between* the Rapid Fire and Shut Down Apps check boxes - you'll see a "Yoda's Power Mode" check box. Check it! - skip to any level by pressing 1 through 9 for those chapters and A through F for the rest - pressing the + DECREASES damage and hitting - INCREASES your damage ? patch to allow use with FWB's "CD-ROM Toolkit" - copy the Rebel Assault appC
lication to your hard drive - open the STRS 0 resource with ResEdit - after the final 0A00, *add* the following: 5265 6265 6C20 4173 7361 756C 743A 5245 4245 4C3A 2573 3B31 00 - CODE 4, offset 39E8 - change 2F3C 0000 2064 to 2F3C 0000 2152
v1.0f
Recognita Plus
A46AW422604388
E Red Baron
Red Baron 1.0
When playing on a recent-model Mac (in particular, any model since the LCIII), using mouse control sends you into non- survivable spin on any Mac. - FIXED by turning off mouse control and flying with the keyboard by using the *undocumented* keystroke Option-D.
v1.0f
Regognita GO-CR
UI23C2029043
Remote Access Pro
A"PF026549CB0002319A0045 (250 Nodes)
2.02f
E Remove It
10022814
Rems Property Manager 500
92337
RemusT
RB0N000U
v1.4f
E Renderman
1114897156
Resorcerer
render
renderman
report
request
resorcerer
resources
response
restart
retrospect
retrospect
remote
retrospect
remoto
return
reunion
rhapsody
right]
ripterm
ripterm
roadtech
roaster
studio
rocket
rosanne
route
route
viewer
rumba
rumba
mainframe
connection
runtimeK
saberlan
salomon's
santorini
santorini
server
manager
saver
scanprep
screensaver
security
separator
series
serverW
setup
share
sidemill
simplyi
simpsons
simulator
sketch
smartserverX
smartsuite
snoopyq
soccero
socket
solutions
solver
songbook
sound
To depersonalise Resorcerer, open a COPY of the program with ResEdit and make the following changes:
Locate the resource MNFS and delete it.
Next, open the CODE resource. Create a new resource, giving it an ID of 99. No need to enter any hex, just close the resource.
Then locate the UNIT resource. Double-clicking on this reveals two resources, ID 128 and ID 129. Open 128 first, select all the hex and delete it. Then type the following hex on the first line: 0007 0000 0000 00
Close ID B
128 and open 129. Clear the hex as before, and type the following hex on the first line: 0029 0000 0000 00
Save all changes and exit ResEdit. Launch Resorcerer and enter your own personalisation information.
A0SN: 28424XVMH0333 For Benelux.map: 2316FSFE74625
Rumba Mainframe Connection
(4 Node License) 491097
SaberLanT.License:AEL-03-0001-100
Serial:AEL122998.100
vAllf
Santorini Server ManagerT
7610-4947-8854-0626U
v3.2f
ScanPrep ProT
IXP-61082016-BK4
SN# 1234567D9123B56489U
v2.0.2
v3.4.1f
ScanTasticT STPS4-1435174855
STPS4-625243912U
v4.0f
SCO Open Server
SN: 2BF016051 Key: UQQFGHCD
4.21f
SCO Unix NFS
SN: ING000045 Key: JQQBRMYC
1.1.0f
ScrapIt Pro
the algorithm is as follows
CODE=<num1>-<num2>-<num3>
(CODE must be >=7 characters long so padding with zeros may be necessary)
where:
num1=numCopies*61; //num copies>0
num2=numCopies*nameLength //nameLength>0
num3=Sum of characters in name (do not add in the length byte)
Version: "4.2"
The protection scheme is as follows:
Name:'<nameStr>'
Copies:n , where n>0
Code:'<num1>-<num2>-<num3>'
where:
num1=multiplier*n, where, for ScrapIt Pro multiplier=61.
num2=n*length(nameStr)
num3=S
scanprep
scantastic
schedule
scholar
server
scout
scrapit
scrapit
screen
screen
screen
screen/power
screengear
screensaver
screenshot
scripter
director
sculpter
second-friend
security
seize
seize
seldon
select
select
semware
semware
editor
prerelase
separator
green
screen/power
saver
serialspeed
serialspeed
series
serverW
server
program
manager
sesame
setup
shade
shade
shadowcaster
shadowwraith
share
shrinkwrap
shutdown
smartserverX
smartsuite
snoopyq
soccero
socket
solutions
solver
songbook
sound
IPNetMonitorT
Name: Registeredality
electric
image
electronic
workbench
email
effects
empire
deluxe
empower
empower
encore
enforcer
envision
envolve
escape
escape
velocity
estimator
etherpeek
eudora
excalibur
server
exceed
exile
exodus
extensions
strip
extensis
drawtools
extensis
intellihance
extensis
extensis
portfolio
extreme
candy
scholar
facespan
falcon
family
treemaker
fantasy
fantasy
photo
collection
stone
cache
driver
fonts
fastedit
deluxe
fasttrack
schedule
fauve
matisse
windows
fax-a-laugh
faxcillitate
faxnetwork
faxserver
netware
faxstf
delivery
feathergif
ferrari
grand
fetch
extensis
field
assistant
fighter
buddy
force
hands
um(nameStr[i]), where i ranges from 1..length(nameStr)
note: The Code field must be at least 7 characters (including dashes), but since only the numerical value of num1..3 is important you may pad any or all of the subfields with zeros as necessary.
Thus for NameStr='Anonymous' and Copies=n=1 we have:
num1=61
num2=9
num3=2*('n'+'o')+'A'+'y'+'m'+'u'+'s'=969
thus a valid Code is any of '61-9-969', '061-009-969', '0061-0009-0969', ect...
and you'll get $500,000 and all technologies enabled.
SimCity 2000 1.0
Raise $1 million by issuing a bond and immediately repaying it - CODE 4, offset 3376 - change 04B9 0000 2700 to 06B9 000F 4240 ? Enable all technologies & get $500,000 - go into "full zoom" mode - type: porntipsguzzardo - after the first time, typing 'ardo' gives you another $500k # an updater to v1.1 is currently available at most mac archive sites
SimCity 2000 1.1
Enable all technologies
b & get $500,000 - drag the 'Maps' window out of the toolbar so that it is the front-most (active) window - type 'pirn' - click once on the status bar (its the small horizontal bar thats usually to the right of the toolbar, shows the active tool and also the current weather) - type 'topsguzzardo' - after the first time, typing 'ardo' gives you another
vAllf
Sins For Sirds
1371078
SIO 16 Port Version
10010205
1.45f
Skatteprogram 94/95
62-046-123456
9.11f
Skullcheck
A((edit SKULLCHK.KEY) Line #9: (Your Name)
Skylight
XXX-201258-BMAX
Sleeper
VName SN
-------------------------------------
Registered 6551
You 4997
Everyone 5887
LeetCheeZ 6215
SPC 4961
Informant 6161
Natty 5371
Book Robber / 20630U
v2.1.1f
Smaller InstallerS*(note to myself:License #=base 8 reversed)
4E SndPlayerT#472024575144 '<Sharing Owner Name>'U
v2.x.xf
Snooper
S112-2331
3.30f
Softdesk Core
07DCR3E 20337
7.02f
Softdesk Productivity Tools
07DPP3E
20333
7.02f
Software Caroussel
30230940
6.03f
SoftWindowsT
2000-0100-2083-9122
2000-0100-5122-0594
2000-0100-7448-0102
2000-0100-5421-1836
2000-0208-0042-5185
Ten User License #: 2003-0200-4505-4825
;2500-6666-2112-1492
2500-0004-1485-1139
2500-0003-4575-1095
'2600-0000-0000-0121
2600-0535-4377-1264
2700-0531-2124-1150
2500-6666-2112-1492
2500-0004-1485-1139
2500-0003-4575-1095
2500-0006-7278-7015
2500-0003-7231-7432
2000-0100-2083-9122
2000-0100-7448-0102
2000-0100-5421-1836
2000-0100-5122-0594
2900-0501-2220-2068U
v1.0.2
v.4.0f
Sonar BookendsT
B6594U
v4.0f
sonixWorks ArtistT
jdpVZ-
cn-aB
_fScDaU
v1.0f
SonOfBuster System Unlock Key
corel
corel
gallery
corel
photopaint
corel
print
house
corel
ventura
coreldraw
corelflow
correcteur
corrector
corstream
corstream
dedicated
server
monitor
crashproof
cream
create-it
creator
cross
cross
platform
graphics
flying
fonts
socket
cstar
cubab
cuckoo
cuseeme
cyberassistant
cyberfinder
cybergauge
cybersound
cybersound
cyberstudio
cyclone
cyclone
express
dabbler
daceasy
daceasy
dagesh
forces
darkness
access
tools
junction
database
databoss
databoss
datacad
datacad
estimator
datacad
professional
datadesk
datamaker
datasafe
T0fb1dc44cT83823ef9
v7.5.3r3s1c3
58213f7eS87f97abeU
v7.5.3s6c3f
Sony Hybrid CD_ROMT
HYB2-120-0-553B2B16U
v1.2f
Sound Edit Pro 16T+SSM100-4604-1072-4078
SSM100-4611-8075-2069
[30120-0255-4475-41877
30120-0926-2007-29733
30120-0423-4997-87325
30120-0916-2651-75511
(Bundled)
30120-0947-0299-05505U
v1.6.x
v2.0.1f
Sound Sculpter IIT
Enter the following in the EXACT case in the registration:
123 Main Street
Anytown, DC 12345
SPCKRACK0000006A00 (those are zero's).
v2.1f
A-SoundEdit 16 2.01/Deck II 2.51 Install Bundle
TSvBundled with MMD
SoundEdit: 30120-0947-0299-05505
Deck II: 33025-0503-0165-32697
SoundMachine
sound
sound
sound
sculpter
soundedit
soundedit
201/deck
install
bundle
soundmachine
soundmaker
sourcer
Hold down these keys -> Command-Shift-Option
Choose REGISTER from the Apple Menu
This brings you to the reg dialog instead of reg information, simply type name
and company, and that's it. not S/N needed at all.
- to register hold down option-shift while choosing register.
v2.6f
SoundMaker T
123456784900
123456703188U
v1.0.2f
Sourcer
SR309388-JYAX
6.05f
Spanish Assistant
M1102424
M1104116
Spectre VR CD
7WWD7JM3 Network SN: BWRK29R8
Speed DoublerS~SpeedDoubler 1.0.1
+1900
6632 - 6D32
Version: "1.0"
Removes the need for an inserted disk:
Code 2 +1618
6632 -> 6032U
v1.0.1
v1.0f
llCatcherT`SC100000SPC6488
SC111111SPC8134
SC122222SPC0238
SC133333SPC2758
SC144444SPC4506
SC155555SPC0738
v1.5.6f
Spellswell 7T
HK11-8021-1AU
v1.0.5f
speed
speed
doubler
speedkit
speedster
speedtest
spellcatcher
speller
spellswell
spellswell
spinrite
spiralgraphics
spreadsheet
spreadsheet
spring
spring
cleaning
square
square
squizz
stacker
stanford
stanford
graphics
systems
tcp/ip
templates
term^
textra
things
timer
toolbook
toolkitT
tools
totally
training
transfer
transitions
translator
trapper
treemaker
trouble
tuner_
twisted
Spinrite
E0225808
SpiralGraphics
Name :Registered
Reg# :HZ-56047
Name :John Doe
Reg# :HZ-6790
Name :
<---(3 <option>-spaces)
Reg# :HZ-51347
Name :=-BOOK-WORM->
Reg# :HZ-63931
HZ-46419 'Meghan Wilson'
HZ-50874 'John Woods'
HZ-21905 'Elizabeth Kawasaki'
HZ-12743 'Stuart Martin'
HZ-53086 'Larry Simpson'
HZ-37242 'James Price'
HZ-39722 'Stacey Jackson'
HZ-64753 'Cyan Riley'
HZ-14761 'Harvey Walton'
HZ-60852 'Mark Wallace'
HZ-64329 'Wpcobjecq'
HZ-51308 'Lbwaevr Mubmt'
HZ-25574 'Qm Ka Aty'
HZ-63931 '=-BOOK-WORM->'
HZ-07976 'A
NONYMOUS'
HZ-07976 'Anonymous'
HZ-01749 'Anyone'
HZ-53062 'Beta Testers'
HZ-00896 'Bill Gates'
HZ-57770 'Copland'
HZ-09140 'Doom'
HZ-19191 'Everyone'
HZ-31148 'Gershwin'
HZ-06790 'John Doe'
HZ-56769 'MacWEEK'
HZ-48369 'Microsoft'
HZ-26097 'No One'
HZ-17251 'No Such Agency'
v1.1.1f
945872
945639
Square One
stardate
stardrive
starry
starry
night
startfaxing
startrek
startrek
journal
stardate
startthing
statusmac
stochastic
stone
storage
storage
executive
suite
summer
super
switcher
syncronis
system
systems
tcp/ip
templates
term^
textra
things
timer
toolbook
toolkitT
tools
totally
training
transfer
transitions
translator
trapper
treemaker
trouble
tuner_
twisted
SQ3-00921-5991U
v3.0f
SquizzT
801652
801538U
v1.0ff
Stacker
U40AA079658
Stanford Graphics
3000394
3.0bf
StarDateT
ESM-10379-8830U
v1.0f
Stardate
LSW-83838-9710
Starry Night
v1.0.2 Format:
SPaaaa0-bbbbbbb0
---- -------
Where "aaaa" is any number from 1559 to 9993 (inclusive) where the sum of its digits are evenly divisible by 10
where "bbbbbbb" is any number from 1361117 to 9999996 (inclusive) where the sum of its digits are also evenly divisible by 10.
Examples:
SP15590-13611170
SP99930-99999960
SP28000-28000000
SP37000-37000000
SP46000-46000000
SP55000-55000000
SP55550-55555500
(It will store your registration info in an invisible file named "Sienna
RTxSP15590-13611170
SP99930-99999960
SP28000-28000000
SP37000-37000000
SP46000-46000000
SP55000-55000000
SP55550-55555500
ELX12345-95225
LX23456-83450
LX34567-33788
LX45678-69184
LX56789-43767U
v1.0.2
v2.1.3f
StartFaxingT
BB138150U
vAllf
StarTrek:TNG Journal E Stardate
ESW-83838-9710
UE StatusMacT
SMR25168 25 UsersU
vAllf
StochasticT
5555U
v1.0.1f
Newton
Storage Executive
241980001010487
Strata Media PaintT
M12309000011U
vAllf
Strata Studio Pro
stories
strata
strata
media
paint
strata
studio
stratavision
stratavision
streamline
streets
streets
streetwizard
string
strip
studio
studio
studio
studio/32
stuffit
stuffit
deluxe
stuffit
installer
maker
stuffit
spacesaver
styleline
styleline
designer
stylescript
textra
things
timer
toolbook
toolkitT
tools
totally
training
transfer
transitions
translator
trapper
treemaker
trouble
tuner_
twisted
Version: "All"
The Serial Number follows this pattern: A**6241-----1. The "**" is representitive of one of the following sequences: 02,15,28,31,44,57,60,73,86,99. Plug one of these where the stars are.
In the "-----" space enter either of these sets of numbers: 37708 or 79824.
Using this method you can yield over twenty copies.
To do this edit the 'V4sn' resource. Be sure to make it the same length (14 bytes including the beginning length byte=$0D).
A156241377081
A466241527321
A466248403601
)C466241527321
C466248403601
C156241377081U
v1.7.5 Blitz
v2.0f
StrataVision 3DT
D256246636041
A156241377081U
v5.0f
StreetWizard
24451FD
Studio 1
4682119240
Studio ProS&Please see the entry Strata Studio ProU
vAliasf
_E Studio/32E Studio/32
workgroupv
v200b
v20b3
v20fc4
v20r5
suite
summer
super
super
utilities
super
queue
superbase
superbase
supercache
supercard
supercharts
surfwatch
switcher
swoop
symantec
symantec
caffeine
synchronize
synchronize
syncronis
syndicate
system
systems
tableworks
tango
tapestry
tapestry
tattletech
taylor
tcp/connect
tcp/connect
things
timer
toolbook
toolkitT
tools
totally
training
transfer
transitions
translator
trapper
treemaker
trouble
tuner_
twisted
3006127841U
v1.2f
StuffIt Deluxe
Version: "3.5"
A StuffIt 3.5 serial number can be generated in the following manner:
DLX?-***-nnnnnn
Where:
? is an alphanumeric character (all alphabetic's are considered upper case)
*** is a three digit number calculated by adding the ASCII of the ?
Open the resource 'LOST' and inside resource #128, you will see your personalization information. The first two bytes are the checksum, the next byte is the length of the personalization information. The program verifies the checksum when it starts up, so if you change it (not reset it), it will quit. To reset the personalization, just change the checksum (
first two bytes) to $FFFF and then delete the rest of the data. Save your handy work and run the program.
I have not tested to see if it checks for a certain serial #, but 0123456789 seems to work every time for me. It also seems to take '0123' as a valid serial number, so I don't think that is checking the serial number against anything.
0.52B117
123456
0123456789
hTP-123456-123456-A90
TP-000000-000000-39C
TP-000000-000001-3BD
TP-000000-000002-3DE
TP-BOOKWM-BKWORM-28DU
v3.0f
Toast CD-DAT
A.017362U
v2.7.2f
TransjammerT
82-50195-51793-52051U
vI & IIf
TrapWise(Luminous)T
TWP230DU0013005712U
v2.3f
Tree PainterT
232607U
v3.0f
Tree ProT
432041
442191U
v4.0f
Tri-Catalog ProT
D637593728U
v2.0.1f
Triazzle Animated PuzzleT
TRZ-41257-9637
SPC-10002-0104
vAllf
TrueMotion-ST
051895U
v1.1a3f
TypeCasterT
100100310040
100001123725
300701722461
100001123725U
v1.0b
v1.1.1f
TypestryT!1800172168
1800159111
3824455642
v2.1.1f
Typestry
478821383
4144650235
TypeStyler
toolbook
toolkitT
tools
totally
tracker
training
transfer
transitions
transjammer
translator
trapper
trapwise
trapwise
luminous
painter
treemaker
tri-catalog
tri-catalog
triazzle
triazzle
animated
puzzle
trouble
truemotion-s
tuner_
twisted
typecaster
typestry
typestyler
typograph
u-page
ultima
ultima
1) Go into ResEdit or some other Resource manipulator.
2) Erase SIZE code resource ID 0.
3) Open SYSP code resource 1989, erase all the hex components so that the size of the the resource is 0.
4) Now launch up TypeStyler and put your name in...U
v2.0.3
U-PageT
0002-3373-0867-2034U
v4.0.1f
Ultima III
Reg Code Name
-------- ----
SVUGLXRE Lord British
MKDYNAKS Anonymous
HKCXLVUG Mr. Anonymous
KKWSNNXJ Mr. {Bogus}
MKDYNAKS 'Anonymous'
MKDYNAKS 'ANONYMOUS'
VGNNLMNG 'Reverse Engineering'
Illegal name:'Doom'
Illegal name:'No One'
BVPNKBPC 'Everyone'
ASJNMGJN 'Beta Testers'
HGNNLBHA 'Mac Users'
CKAXYNNK 'Unregistered'
Illegal name:'MacUser'
LQTNNCVN 'MacWorld'
Illegal name:'MacWEEK'
Illegal name:'MacTech'
Illegal name:'Copland'
BMLNNJWU 'Gershwin'
KLNNBSAG 'Microsoft'
NDNVGNPS 'Bill Gates'
JTBEUPEEEJ 'The Devil'
NJSGPTKE 'Rupert Murdoch'
UBWNLMLM 'The Shadows'
v1.2f
E UltraFindT"2981460 'Doom'
4675320 'Anonymous'U
v1.x-2.xf
UnDoIt!
74656-KPSJ16309-QW359-001U
v1.0f
UniQornT
UQ199930114056-605U
v1.0f
Updater ViseTwUPV100R7674875-118
UPV100R8338816-100
UPV100R8431238-654
UPV100R3743465-175
UPV100R1413575-627
UPV100R6738451-124
UPV110M0000124-14757
UPV110M0000124-14757U
v1.0.1
v1.3f
URL ManagerT
1244397568 'Anonymous'U
v1.1xf
ValueFaxT
D7BF082CU
v2.0.4f
Vanishing Cream
Name MoonDark
Registration Code VALklU
v2.0f
VectorToolsT:VMU-200-001-536-000000
VMU-200-010-440-000000 for10 userU
v2.0f
E Vellum 3DT
01399
#V#M-0081-2.70U
v2.1.2
v2.7.0f
Versatile ProTyID:39466011 PW:4318
ID:02878598 PW:0315
ID:04581244 PW:0501
ID:71190246 PW:7790
ID:76354972 PW:8355
ID:79549337 PW:8705
v1.6.xf
Vertigo 3D WordsT
MT-183-MF8-347U
v1.0f
Vicom Internet GateT$claa-fpjboogb-Kclgf-bgaclc-bgpo-aecdU
v3.2.2f
VideoFusionT
VF160547-20938U
v1.6f
VideoPhoneT
111459U
v1.0.2f
VideoShop (Avid)T
302-1028355N
302-1028355NU
v3.0.2f
VirtualT Name: SPC
Code: FCPAAAAA
MoonDark / ZHHGQTKD
Name MoonDark/NOP Industries
Registration Code HWYWXPFZU
v1.5.1
v1.6.1
v2.0f
Virtual DiskT
00310456
0222492382U
v2.0.1
v2.0.3f
Virtual PCT
3234-8266-9281-1218
0372-6585-9353-1819U
tus VRT
GMCAH109-000-9AC8U
v1.0.1f
Virtus WalkThroughT
ECMAA621-000-AAF2
EDVWT157-000-36F6
#EMCCC702-000-9674
AMDAA058-000-00FC
GEEEEE000-000-DD0E
EEEEE000-001-5E9F
EEEEE000-002-A5F0
BOOKWORM-000-0D06U
v1.0 Pro
v2.5.1f
Voice MessengerT
AZ10021932U
v1.5f
E VoiceMailT
V00000001/C3F7-Q00000006U
vAllf
VulkanT
00300-00000000mU
v1.4.2f
WarbirdsT
Name: Buck Rogers
Key: WBK4354499U
1.2.3f
WarcraftSxWarcraft 1.0 to let you enter any answer into the copy protection dialog:
Change CODE 5 offset $3538 from $6708 to $4E71U
pro10
pro102
pro103
pro106
pro11x
v1-265
Waterloo MacJANETT
40-58423E-82BCD-9324778PU
v4.0.xf
Wave ConvertT
65602WCMA2863U
v2.6.3f
WealthBuilderT
WM416MT63EUU
v4.0f
Weather Tracker
SN format is as follows:
XXXX-LE-YYYY
XXXX YYYY
---------------
1358 0009
1570 0401
2869 0478
3255 1541
3283 1680
3849 2348
4263 2740
4750 2834
4839 3728
4982 4137
5235 4403
5270 4687
5318 5160
5672 5375
5687 6144
5740 6220
5956 6668
6243 7208
6829 7731
7250 7941
7510 8108
7652 8363
8233 8500
8657 8929
8942 8957
9006
---------------
using n1, n2,B
n3, n4 for XXXX, all XXXX's meet the following criteria:
Make these changes to a sector copy, then bit copy tracks #78 & 79 with copy
II Mac.U
vAllf
Winzip
Name: Free SN: 3814026B
Name:Steve Hsu s/n:56960D51U
v6.2f
WishbringerS6Search for 6FDA100667063B7C change to 6004100667063B7CU
vAllf
Wizardry II Knight of Diamonds
- KNIGHT OF DIAMONDS (aka. WIZARDRY II)
EFFECT: By-passes copy protection.
HOW TO: Open CODE resource 73
at offset, change word to $4E75f
WodenS
YHSGWJnnnnnnn
(Where the 'n' can be any number)
YHSGWJ7891234 (Note the letters must be CAPITOLS.
YHSGWJ1234567 (Note the letters must be CAPITOLS)T
YHSGWJ7891234
YHSGWJ1234567
v1.0.1f
Word Perfect
1WP61XW0166388
TWP61XWO414491CE
Word PerfectT
V0000005961U
v3.0f
Word Perfect WorksT
1WW12XM0000099U
vAllf
Wordstar Professional
29015146
Wordtris
perfect
perfect
works
words
wordscan
wordstar
wordstar
professional
wordtris
workbench
workflowm
works
workshop
world
world
builder
games
world
music
writeY
writer
weaver
x-ferit
x-mas
x-mas
lights
x-men
xerion
xoftware
pressmarks
print
tools
xpress
xyphus
zephyrpalettes
zipit
zipquest
zipquest
(color version)
Search for: A915 3B7C 000C 962E 422D
Change to : 4E71
Search for: 6600 FF4C 2F0C A983 1006 4CEE 10E0
Change to : 4E71 4E71 2F0C 4E71
Search for: A991 486D 95F2 7003
Change to : 4E71
(B/W version)
Search for: A915 3B7C 000C 963C 422D
Change to : 4E71
Search for: 6600 FF4C 2F0C A983 1006 4CEE 10E0
Change to : 4E71 4E71 2F0C 4E71
Search for: A991 486D 9600 7003
Change to : 4E71
Open it with ResEdit and open CODE resource ID=1 with a hex editor. At
position 07A0 you will fin
d: 4EAD 056A 4A00 6606 4EBA 0BC8 A9F4 598F
Change this to: 4E71 4E71 4E71 4E71 4E71 4E71 4E71 4E71
WORDTRIS v1.0 (B&W and Colour)
EFFECT: It doesn't ask for a word at start-up any more.
HOW TO: Open CODE resource 1
at offset 07A0, change word to $600C
WORDTRIS B/W
EFFECT: The password dislog will never show up
HOW TO: LOCATE CODE RESOURCE 1
CHANGE THE WORD AT OFFSET 07A0 TO 4E71
CHANGE THE WORD AT OFFSET 07A2 TO 4E71
CHANGE THE BYTE AT OFFSET 07A6 TO 60
WORDTRIS V1.00 (C
OLOUR)
2 Patches, each works independant of the other so you can use one, the
other or both.
A) EFFECT: This will still bring up the dialog, but you just hit return 3 times and it will start.
HOW TO: Code 1, "Main", anton 6
offset 0082-0086 replace with 4E71
B) EFFECT: This will stop the dialog from being brought up. If you want to be reall safe, do both, because the second just kills the dialog and under some ciramstances it might quit anyway.
HOW TO: Code1, "Main", anton 6
offset 0D,07A replace these two bytes with two 4E71's
vAllf
World Builder GamesSXmake a World Builder adventure 32-bit capable - CODE 1, offset 0008 change 2078 to 602C U
vAllf
World MusicS&SN#='MXXXXX-XXXXX' , where X=any digitT
M20014-41003U
v2.0bf
WWW WeaverT
1.1.0*985-10-48-48-57-68-51-51
1.1.1*000-10-48-49
1.1.1*001-10-48-52-49
1.1.1*002-10-48-56-49
1.1.1*003-10-48-67-49
1.1.1*100-10-48-48-52-54-51
1.1.1*111-10-48-48-70-54-51
v1.1.1f
X-FerIT
X-Mas LightsT 125001751U
v1.0f
Xerion
the following commands to wired things:
Clear 5 - Next Level (Just like Dos Master said for Crazy Cars)
Clear 6 - Directly to the bounus stage
Clear 3 - Clears what ever is pulling you or making you wiggle
Clear 1 - Make the paddel larger
Clear 2 - Makes you catch the ball
vAllf
XoftWareT
s006163U
v3.0f
XP PressMarksT
001139U
v1.0.6f
XP Print Tools XTT 815715147U
v1.0.1f
XyphusS
Search for each string seperately and change the 67's to 60's.
4EBA 5F6C 101F 6708
4EBA 5E6A 101F 6708
4EAD 007A 101F 6708
or try
Search for 670002502C7C00 change to 4E714E712C7C00U
vAllf
ZephyrPalettesT
2-130-3186163U
ZipItttesT
2-130-3186163U
ZipIt
CODE #2
+2292 OC39->13FC
Version: "1.2"
CODE #2
+2B3A 660E->600E
+2B4A 0C39->13FC
+2B52 6614->4E71
Note that this does not actually register the program, it just makes it behave like it was registered. Also, it enables encryption!U
1.2.6
ZipQuest ProT
SN#A 10392, Reg#B-143385261U
v1.0f
Zone of Avoidance
EFFECT: Remove Copy Protection
HOW TO: CODE 9 @1A0A : 4EB9 -> 6008
Another collection of modifications to make games more fun!
****************************************
This patch allows you to have unlimited missiles:
Open CODE 4 in ResEdit
Change it at offset $4392
From: $5379
To: $6004
****************************************
This patch gives you full abilites after you finish Level 1:
Open CODE 4 in ResEdit
Change it at offset $736E
From: $6252
To: $4E71
Change it at offset $7B/37A
From: $4ED1 0C39 0004
To: $23FC 0404 0404
ZoundsT
ZND100AAC00000450U
vAllf
Real PCT
3100-0000-4172-2233
v.1.0f
zmodem
avoidance
zounds
4 in the prefs to
FFFF FFFF
When I say the address I mean the address/offset of the byte in the Hotline Pref's data fork.
Bytes Uploaded: This is located in four bytes at the address C4. It
s in decimal.
Bytes Downloaded: Same as Bytes Uploaded but located at address C8.
Chat: Same as Bytes Uploaded but the address is D0.
Time Online: If you really wanna edit this you
ll need a time-->hexedecimal converter. Hotline takes the long integer in Date format
nd the subsequent bytes are the serial number itself, encrypted by XORing the bytes by $E9.
The crack so the serial number will always look good is:
Open it up in ResEdit
Open the resource 'CDEV' ID -4064
Change offset $56DA from $59FF to $5A00
C38292117
C38292117
M03539528
GKA292936191
KA298862991
KA299150991
KA296202991
KA294541991
KA291194991
KA298862991
A$KT319540678
KT329752789
KT340971901
v1.5.5
v1.5.8
v2.5.1
v3.0f
(pWnd, that way it doesn't matter what you typed, it will register the scenario anyway.
Cracking guide for Realmz 3.0.1
RealPlayer PlusT
0094-32-4766
0094-26-7618U
| Where Its going |
| +D7A | 2C12 | BEQ.S | Anon7+DA2 | 2C3A |
The line as cracked:
| Anon7 Offset | Code Offset | Instruction | Data | Where Its going |
| +D7A | 2C12 | BRA.S | Anon7+DA2 | 2C3A |
So what's the difference???
The difference is BEQ.S has been changed to BRA.S
BEQ.S means jump if the last compared data was EQual (btw - the last compared data is your password and the password you *should* have ty
ped in). What's going on is that Realmz has just got you password and compared it to what it should be. Realmz then checks to see if they are equal (uses a CMP.L command)
So, if you typed in the right password, they are equal, and Realmz jumps to the bit of code where you register the scenario.
But, if you got it wrong, then it doesn't jump, and instead continues, putting up the error message etc.
What we did was simply to change the Branch_if_EQual_to command to a simple BRAnch comma
in the right reg number, realmz continues to the bit of code where you register the game.
But, if you got it wrong, then it jumps, and puts up the error message etc.
What we did was simply to change the Branch_if_Not_Equal_to command to a Branch_if_EQual_to command, that way it doesn't matter what you typed, it will register the scenario anyway provided you typed in the wrong number.
Part Three:
The Realmz 3.0.1 Scenario Crack
Basic Data:
Change Resource:
Type: CODE
Resource
Number: 7
Line: 2C10
From: 69FE 6726 3F3C 004E
To: 69FE 6026 3F3C 004E
How To:
1) Open realmz in ResEdit.
2) Open the 'CODE' type resource ID 7.
3) change line 2C10 to 69FE 6026 3F3C 004E.
What its doing:
As looked at with ResEdit + CodeViewer, you are changing a resource at
Type: CODE
Resource ID: 7
Module: Anon7
Offset: +D7A in Anon7, or 2C12 from the start of the resource
The original line, before it was cracked:
| Anon7 Offset | Code Offset | Instruction | Data
TeleFinder
As looked at with ResEdit + CodeViewer, you are changing a resource at
Type: CODE
Resource ID: 9
Module: Anon7
Offset: +3DE from Anon7 or 2642 from the start of the resource
The original line, before it was cracked, was:
| Anon7 Offset | Code Offset | Instruction | Data | Where Its going |
| +03DE | 2642 | BNE | Anon16+$494 | 26F8 |
The line as cracked, is
| Anon7 Offset | Code Offset | Instruction | Data | Where Its going |
| +03DE
| 2642 | BEQ | Anon16+$494 | 26F8 |
So what's the difference???
The difference is BNE has been changed to BEQ.
BNE means jump if the last compared data was Not Equal to zero (btw - the last compared data is your password and the password you *should* have typed in). What's going on is that Realmz has just got your password and compared it to what it should be. Realmz then checks to see if they are equal, and jumps to the appropriate place.
So,if you typed
truction.
2) Step: type 's' then the <return> key this is exactly the same as the above instruction exept that it will jump to the next instruction whether or not it leads to another proceudre which returns.
3) Go: type 'g' then the <return> to continue with whatever happend before you were thrown into MacsBug.
4) Escape to Finder: type 'es' then the <return> and you will be put back to the finder just as if you force quit the application.
5) Cleat All Traps: type 'atc' then the <return
> to clear al set traps. A trap is just a method to make youself jump into MacsBug whenever a program trys to do something like bring up a dialog box.
Part Two:
The Realmz 3.0.1 Registration Crack
Basic Data
Change Resource:
Type: CODE
Resource Number: 9
Line: 2642
From: 548F 6600 00B4 2F3C
To: 548F 6700 00B4 2F3C
How To:
1) Open Realmz in ResEdit.
2) Open the 'CODE' type resource ID 9.
3) change line 2642 to 548F 6700 00B4 2F3C.
What its doing:
e ID of the resource, in the above case it's CODE resource ID 9.
The three Bottom lines conatin the three next instructions to be executed, Where the top one with the '*' next to it will be executed next.
3) the Boxes on the left give you information about the current program's state and some further info on registers, but you can for now ignore all this.
4) the largest Box is the one above the Program State is the display area, anything that happens is told to you here, if you find yo
urself unexpectedly launched into macsBug It'll tell you why here. This is also wher you read the help from.
Using MacsBug:
The Basic commands you'll need to know are:
1) Trace: type 't' then the <return> key to trace through some code. This will execute the current instuction and go to the next one IN THE SAME PROCEDURE, so that you wont change your current procedure anless the current insturction will not return to the smae proceudure, in this case it simply take you to the next ins
e all these bits.
There are many other branch instructions, most of most of then beginning with '6', but you can find those by experimenting with resEdit. Have fun!
Some Help with MacsBug:
MacsBug is very complicated for those unused to it, but it is also one of the most powerful and simple to use programs for those who understand it, kind of like life...
Anyway: Here's the Basics,
1) at the very bottom of the screen is the command line, everything ou type is written here untill you p
ress return at which point it is executed.
2) the box directly above the command line is the program state and contains the current possition in the programs code. You will see four line. The top one indicates the current possition of the program in it's code. If you're running a 68k program you will see something like: 'CODE 9 something' you can ignore the something, but the 'code 9' bit os important. the 'code' bit tells you that you are in a code resource, and the '9' bit tells you thg
66xx xxxx BNE (Branch if Not Equal) Branches to the
number specified if the last result was not
equal to zero
67xx xxxx BEQ (Branch if EQual) Branches to the instruction
if the result of the last instruction was
equal to zero.
60xx xxxx BRA (BRAnch) Simply branches.
One thing that confuses many peoplel is that often when you have an instruction you get after it a fullstop then an 's' or a '.w' and so on. What this is doing is usually not very important to the cracker (imho) but to those no progarmmer minded: this is telling the computer to only use sertain bits when we jump. the '.s' indicates hwat is called the word length, but anless you want to get neck deep in assembly and programming you can ignor
tableworks
tango
tapestry
taylor
tcp/connect
techtool
telefinder
teletalk
terrazzo
tesselation
tetris
textbridge
textconverter
textmerge
textsplitter
texturemaker
texturescape
palace
three
timbuktu
month
toast
writer
toast
cd-da
transjammer
trapwise
luminous
painter
tri-catalog
triazzle
animated
puzzle
truemotion-s
typecaster
typestry
typestyler
u-page
ultima
ultrafind
undoit
uniqorn
updater
manager
valuefax
vanishing
cream
vectortools
vellum
versatile
vertigo
words
vicom
internet
videofusion
videophone
PC Focus 6.01 NL
1732221
PC Miler
W410626
PC Tools
11-50-01415
2.00f
PC-Express
AH(edit EXPRESS.KEY) Line #1: 904309038 1941650006 1365124106 -1746626551
E CommotionSYFor the S/N, use a 17 digits long number, 9th number is letter S, 12th number is letter FU
v1.0.1f
Disk EssentialsT!Any numbers, but in this format:
xxxx-xxxxxxU
v1.0.6f
DiscribeT
5005569U
v2.0.1f
Adrenaline Numbers & ChartsT
Charts : CH5598-DV-3373-MX
Numbers : NB3897-MD-8744-MPf
Window MonkeyT
Name: Fred Bon
S/N: 539068619831U
v1.2.2f
Spring CleaningT
SCL0-769-000000
SCL1-770-000000U
v2.0f
PictSortT
Name: Evangelist
S/N: 966735EU
v1.6f
Pandoras BoxT
13661473U
v1.1f
E MacAttack
tools
xyphus
zephyrpalettes
zipit
zipquest
avoidance
zounds
manager
valuefax
vanishing
cream
vectortools
vellum
versatile
vertigo
words
vicom
internet
videofusion
videophone
ing like that.
[k[racker box
The Prefs
It
s in your Preferences folder. Gee, no kidding? Well, get a data fork editor that supports hex editing and also lets you see the offset/position of bytes.
What to hack
If you
re a real wuss and wanna just make sure that you never get your name changed to
[name] needs to upload
then just set the four bytes sta
rting at address C4 in the prefs to
FFFF FFFF
When I say the address I mean the address/offset of the byte in the Hotline Pref's data fork.
Bytes Uploaded: This is located in four bytes at the address C4. It
s in decimal.
Bytes Downloaded: Same as Bytes Uploaded but located at address C8.
Chat: Same as Bytes Uploaded but the address is D0.
Time Online: If you really wanna edit this you
ll need a time-->hexedecimal converter. Hotline takes the long integer in Date format
s this is it, a game cracked, and all you had to do was change about a 67 and 66.
So how's that? Realmz cracked in 2 stages. ;-)
The purpose of this is not to crack Realmz as much as to learn how to crack, which I hope this has helped you to do. Thanks to: Mr. Wood for Editing and Thanks to Fantasoft for making the game.
MacsBug Sample Data
Here is my smaple data for the use of MascBug in part 1.1:
ration number. To do this you'll have to open the hex editor, after selecting the appropriate hex instruction on the far right of the Code Viewer window. The change is in fact very simple; the BNE instruction is 66xx and the BEQ instruction is 67xx. [Note that selecting an instruction is done in the code viewer, where the disassembled code is placed next to its hex and ascii equivalents. When opening the Hex Editor, this selection is automatically transferred, so changes can be made, and t
he changes are also automatically sent back]
2.0.5) Save and quit. then test the program. You don't get quite the desired result, but you do find out more about how the program works.
2.0.6) Go through all the branches, one at a time, changing the next and fixing the last one, then testing the program. This is slow but almost always bound to work.
2.0.7) You should find that when you get to BNE at 2642 (in code 9) and no other change is made that whatever happens the game is registered! Ye
ram, but it's more or less obvious if you've hacked much in the past. (not that you have :) Another interesting thing is that: PPC programs don't store there code in a resource at all, but instead they do it in teh dta fork of a file.
2.0.3) Start tracing through the code with your eyes, and check to see that what you wrote down was correct. If we think about it, one of the branch instructions before the error dialog was displayed must have been the check to see if you typed in the right
code. Therefore we're going to do some fiddling. But before we do this there is a little problem with the format of ResEdit compared to that of MacsBug, I've documented it at the back because it's quite complicated so if you're unfamiliar with the difference check that out.
2.0.4) Go to the Second branch instruction that you found and change it to the opposite type of instruction(BNE -> BEQ and BEQ -> BNE). Remember the first one, we figured out, was just to check the length of your regist
uld find one BNE at 2642 (in code 9). If you want to see roughly what happened and what you should have check out the back: I've got it all written down.
2. We now understand the system, so it
s t ime to get our hands dirty with some actual alterations! This is step two in hacking, once we understand a system we manipulate it.
2.0.1) Now we have enough data on where the program goes in these branch statements to start with ResEdit, so open Realmz(the game) in resEdit.
2.0.2) We now nee
d to remember what happened when, and so what you've been writing down is essential. Open the Code set of resources, and then the code 9 resource. Once that is open scroll down to the offset we found the GetDialogItemText.(note that in the ResEdit code Viewer it is written as: GetItText - This doesn't really matter) You may be wondering why I opened the CODE resource, the answer is: all 68k programs have there code in Code resources, and I'm afraid that I have found this out because I prog
7.0RC3
E 4D EngineTY3D3F07705A7CDA 76D0E549EAB820 C96253BCEB1EC0
E4552DC77283CA 0CBE133C4A2720 7D72016726A29B
876C823815DD0C
8778823815DD0C
877F823815DD0C
4489C4445726E3
449DC4445726E3
449AC4445726E3
7904A0CCAE6692
7910A0CCAE6692
7917A0CCAE6692U
v3.5.3
v3.5.xf
4D Runtime ClassicT,05433429847821
89230637511230
58241417605911U
v3.5.xf
AcidT
AC10-M345K-VW98C-359U
v1.0f
ActionLineT
06961xxxx (x any number 0-9)U
v1.0f
Color CentralT
123123123129123123U
v3.0f
Globetrotter Dictionaries
ENG-330000 US English
BOK-800000 Bokmal
BRT-890000 British English
CTL-730000 Catalan
DAN-540000 Dansk
DEU-170000 Deutsch
ESP-850000 Espanol
FRN-580000 Francais
CFR-740000 Francais Canadie
ITL-780000 Italiano
NDL-020000 Nederlands
NYN-240000 Nynorsk
PRT-510000 Portugues
BRS-820000 Portugues Brasil
SDE-030000 Schweizerdeutsch
SUO-180000 Suomi
SVN-210000 Svensk
Microsoft Home PublisherT
SS111-072-347-473-63U
v2.1f
MacPlay3SOTo call up the registration input dialog box click on the "
" in the about box.T
100011-301000-5000U
v.0.99f
E MacWebCamT
ID: Registered
PW: 4957U
v2.4.0f
runtime
classic
serverW
smartserverX
writeY
dimension[
right
term^
tuner_
deluxe`
94/95
a-10a
attacka
cubab
aaron
flowcharterd
toolkite
abovef
above
diskf
accent
accessh
4D WriteS/v2.5
SN#522691
Card#P.040029220455
S.14162850
S.14162850
YK.115863785190
U.041721121454
G.213543770270
N.474546930247
K.071806141834
W.447512760870U
v2.1.1
v2.5.1f
SN: 111209 Code: 8VS2PGCK
v5.0f
4th Dimension
HexWeb
TypographT
Name: Akuma
Code: BC5D178A83BC88C1U
v2.0f
Knowledge MinerT
1832016584
1832016584U
v2.1f
NeatnikT
Akuma
5475795674U
v2.0.1
istration number you just typed in, you should be able to guess this from seeing the instruction above the
instruction, the toolBox function: StringWidth which gets the length of a string. So we know exactly what is going on.
1.1.14) You should continue to use the trace command until you get given the error message about the registration, then you can type in 'g' to continue. Remember to keep track of what is going on by using paper to note down offsets and the other stuff I told you
too earlier.
1.1.15) I thought I'd mention this beacause of what I was saying about JSR instructions: You should have noticed that when you got to offset: '025F4' you find
JSR 'CODE 0008 15AC'+00654
and when you trace over it you find your self entering your name in to a dialog box in realmz. This procedure(CODE 0008 at 00654) is a procedure specially for you to type in your name) - now you can see more exactly how jsr instructions work.
anch or continue, it is this which you will have to note down.
1.1.12) Here's an assembly note: 'BNE' stands for Branch if not equal to, this means that the program checks if the last instruction was equal to zero, if wasn't then it jumps, else it continues. This type of instruction is very commonly used to check registration numbers and so on. Another very similar instruction is BEQ, this stands for Branch_if_EQual_to, this means that if the last instruction was equal to zero then it will
branch, otherwise continue.
1.1.13) The fisrt BEQ or BNE instruction you find should look like this:
and it should say that the program will not branch. Notice that the instruction above the BEQ is: 'tst.w' you can ignore the '.w' as it refers to what part of a series of bits is being acted upton. But the 'tst' part is interesting as it is a test instruction. In this case it is testing the length of the reg
il you get to a 'BNE' or 'BEQ' instruction. ('t' traces through the program)
1.1.10) You should have noticed that when a 'jsr' instruction was traced over MacsBug took a little longer than normal, why? This is because a JSR instruction is an instuction that actually executes a whole chunk of code. It will, just like a ToolBox function, be stepped over, and also like a toolBox Function you can step into it will the step command. The JSR command will execute a whole series of instuctions, us
ually this is used to do a specific task, like to draw a circle. One thing else to note is unlike a ToolBox function you can set traps for these because the programmer makes them.
1.1.11) Note down the offset of the BNE or BEQ instuction, and whether the program will branch or not. Thats what a branch statement is for, if a condition is true the program will branch off to another place, else it will continue. MacsBug tells you just above the command-line, whether the program is about to br
Classroom PublisherT
CRP 9234-5678U
v2.0f
ClearPhoneT
1-GHXIFRD-6666-EYMTRGEU
v3.3.3f
Cleensweep
000-15C-72794
s/n: 124-26C-68134U
ClickPadT
109-00-00320U
v2.1f
Clinical Pharmacy
9412345
E ClipfolioT
1231120413450001
UTo register: Option-click the About box.
Then enter the code:
1502091113247000003
v1.5.1f
Phrasea III Image DatabaseT
Administrator: S/N = 90050334, Code = 6824378542
Server : S/N = 90050335, Code = 7726378542
Gateway : S/N = 90050336, Code = 8628378542
Client : S/N = 90050337, Code = 9520478542
v3.0f
Physik
PHYSIK+V2.0WWW94
trap so we dont accidentally jump back into MacsBug again. This will also speed up everything as MacsBug wil no longer have to check every instruction to see if it's a GetDialogItemText function.
1.1.8) Now we are going to use the trace and step commands. Type 't' to trace, this will make you execute the current instruction and then go to the next one without entering any procedures, there is another similar instruction: the 's' instruction which will take you into a procedure. Basically
when you press 't' on a ToolBox Instruction( like the GetDialogItemText function we just cleared the trap for) instruction it will not enter the code(it will jump over the instruction) where the 's' - step command - will jump into the instruction if possible, so in the above example of a toolbox instruction you will enter the code for that toolbox instruction, in stead of jumping over it if you had pressed 's', but you should have pressed 't', so we have traced over it.
1.1.9) Type 't' unt
# of copies: 9999
Reg. Key: 910A0E3E
<leave company blank>U
v1.7f
Hotline ServerT
name: [k]rack Works
pw: FIWRMMKEDFHDODU
v1.2.xf
Always OnlineT
#Copies: 4E71
Name: Akuma
Code: LRMMSCZHWPU
v1.6f
Battle For The PlanetsT
Name:MoonDark
Serial Number: 153550759f
E Blade ProT
100037U
v2.0.1f
BOOMT
Name: Akuma
Code: JEWXOIKPKAXAX-030U
v1.0.1f
E CatacombsT
Name: Akuma
Code: 17881687U
v2.0f
Extensis QX EffectsTrEME-300-100-920-123456
EME-300-100-464-234567
EME-300-100-245-345678
EME-300-100-468-456789
EME-300-100-405-567890U
v3.0f
FlashT
FLD200-02860-67071-83453U
v2.0f
Harry The Handsome ExecutiveT
Name: Akuma[k]
Copies: 4371
Code: DJFDDACDf
TypographT
Name: Akuma
Code: BC5D178A83BC88C1U
v2.0f
Knowledge MinerT
1832016584U
v2.0f
NeatnikT
Akuma
5475795674U
v2.0.10.1
ation number. To do this we need to intercept the program when it finds out what we typed, this is exactly what MacsBug is going to do.
1.1.5) Type in anything you want into the registration number and press the register button.
1.1.6) You should have jumped into MacsBug again. This is because Realmz tried to use the GetDialogItemText function. Now's where knowing MacsBug comes in important. You need to know what is going on. If your totally new to it you'd better skip to the back and read
up on MacsBug, if you know a bit read on! Now we are in the program we need to know where, so check out the offset and code resource we're on and write it down an a piece of paper.
1.1.7) Type: 'atc' and then press the <return> key. This will clear all traps. a Trap is a fancy word for what we did earlier, but it's also a descriptive word, we traped the program when it tried to call the GetDialogItemText function. MacsBug calles that a trap, so what we do when we type: 'atc' is clear the
,E$My Advanced Maillist And Addressbook
2123-42935
disktop
disktracker
dosmounter
doublescroll
download
deputy
download
deputy
deluxe
download
mechanic
strip
dramatica
training
transfer
eclipse
edisk
eight
deluxe
electric
image
email
effects
empire
deluxe
empower
enchance
encore
envision
escape
escape
velocity
etherpeek
eudora
exile
exodus
extensions
strip
extensis
drawtools
extensis
intellihance
extensis
extensis
portfolio
candy
facespan
fastedit
deluxe
fasttrack
schedule
faxcillitate
faxnetwork
faxstf
delivery
feathergif
ferrari
grand
fetch
extensis
field
assistant
buddy
filecrypt
fileguard
filewave
filmcredits
finale
firesite
e key and the funny triangle key). You should have jumped into MacsBug now, if you have you'll see a big white box and lots of numbers and lines.
1.1.2) Type 'help' then the <return> key to get used to the text interface and then play with it a bit.
1.1.3) Type 'atb GetDialogItemText' [no quotes] then the <return> key. This will set what is called a trap, you will be thrown into MacsBug whenever a GetDialogItemText function is called, note that whenever you want to get text from a dialog,
the programmer uses this procedure. 'How do you know that?' I hear you cry, I know because I program. :) But seriously: Apple have created loads of these and they often create the backbone for cracking with MacsBug. Type 'g' then the <return> key to return to normal. You'll probably notice that everything has slowed down a bit, it's alright, it's just MacsBug.
1.1.4) Why are we doing this? The answer is: we are trying to find out what is going on in the code when reamz gets your registr
meone else's crack (or worse, using Hack It or some similar patch program to do the work for you), is nothing more than an excercise in paint-by-numbers, or fill in the blanks. No guts, no glory.]
1.0.0) Open realmz. You will see that it brings up a dialog box with a register button at the bottom.
1.0.1) Click on the Register button. You'll see that nothing happens as we have not yet entered anything.
1.0.2) Type in a number and press the button again. So once you've done this we continu
e to analyze the system. It then brings up a dialog box asking for a name. This *usually* indicates that there is a relationship between the name and the number. (I must admit that in this case no such relationship exists)
1.0.4) You should type in your name and see what it does. It should then give you an error message saying that you've made a mistake.
1.1.0) We'll now try to figure out where in the code all this is happening by using MacsBug.
1.1.1) Press Command-reset (that's the Appl
7Serial Numbers are of the form (v3.0 only) 'FB3-xxxxxRxxyzS' , where
wning Resorcerer is very nice and all, and someday, if I can justify buying it, I will, but for now I just can't afford it. Another excellent source is "How to Crack" (also known as "[k]") by The Vassal. This is rather old, as is The Shepherd's info, but even though the tools have changed the methods are still useful.]
Another note to make is: Realmz not PPC native, it is therefore not in PPC assembly, but 68k instead.
The Crack:
Firstly: The secret to all types of hacking is to under
stand a system, so as then to be able to manipulate it in a way that you want.
1) So we need to understand the system.
[ed note: This reflects straight back to the comments on assembly above. To crack, one is taking the guts of a program and reworking them to suit your purposes. As such, one must have at least a certain understanding of what is going on in those same guts. Without some basic understanding of algorithms, programming and assembly language, following the directions of so
Having problems with 2.0 ???? Try all of the 2.0 serials we prowide. Some of them are for System 7.x.x and some for Sysstem 8.xTE000A000A0002C
(You should find this 2 times, at Sectors 392 & 3FE)
Change to : 4E71 4E71T
01-1400-6350
01-5029-7811
01-1973-0632
01-1419-2739
01-5029-7811
01-1419-2739
91-9396-9653
91-9352-4752U
v3.5.1
v4.0f
Info DepotT
120D-02087574-00
Registered IVR400M6354119
LName Anonymous
SN# IVR450M4996671
Online Reg SN# REG400M5921959
v4.0.2
v4.5f
E Snapz ProT
Name: Sam Jones
Copies: 666
Code: MADIDJFFU
1.0.xf
Microsoft Front PageT
CD KEY- 806-4719966U
v1.0f
EnchanceT
EN4xxxxHxxxxN where x=[0-9]U
v4.0f
ShrinkWrap
GFirst Name :Registered
Last Name :User
Unlock Code :FSDV3LVFB6FSLQ9PNHU
First Name :John
Last Name :Doe
Unlock Code :FZDAELGFEKFTLVQPNHU
First Name :
<---(3 <option>-spaces)
Last Name :
<---(3 <option>-spaces)
Unlock Code :F5DV3LLFL6FLLL9PNHU
First Name :BOOK
Last Name :WORM
Unlock Code :FVDP3LGFB6FGLC9PNHU
v3.0f
E NetScrawlT
name: [k]rack Works
pw: FXXEBGMHWIMRODU
v1.0f
MagicMacT
Serial Number: 106483
License Code: 2510648301U
v2.0.xf
Enigma
There are numbers on the briefcase that you must "push"
To Register:
push: 5, 1, 3, 1, 3
For Seceret Message:
push: 6, 1, 3
sndcataloguer
sndconverter
sndconverter
sndplayer
snooper
snoopyq
soccero
socket
softdesk
softdesk
softdesk
productivity
tools
software
software
caroussel
softwindows
solutions
solver
sonar
sonar
bookends
songbook
sonixworks
sonixworks
artist
sonofbuster
sonofbuster
system
unlock
hybrid
sound
2.5.1
y need to know some assembly. Some documentation can, again, be found at Apple's Web sites, but the best introduction to it is, imho, "Assembly for cracking" by The Shepherd. It's not easy to get hold of, or wasn't when I got it, but you should be able to obtain a copy via a request in alt.hackintosh, however I have made quick explanations whenever I've dealt with it in this document, so you will be able to learn a bit from just reading this.
[ed note: Besides The Shepherd, mentioned abo
ve, there seem to be scant few tutorials on cracking the Mac, a truly sad reflexion on this fascinating subject. The Observer, for one, has written a series of excellent articles describing introducory crack methods. These are documented in "Basic Mac Cracking I - IV", as well as in a cameo bit in the MacHackFAQ v.2.0. However, as this person is very fond of Resorcerer, a $256 program, to do his work with, I feel that a how-to manual using freely available tools is in order. I'm sure o
"ApA Form View
A List View
Information
A More info
Form View_
Hackers Nest
Another
A Form ViewB
Form View_B
Recordi
Delete
Recordj
Recordn
Closep&More info, related topics and articlesq(Brougt to you by the mighty Hackers nest
Program name
View As
View As
Close
T Platform:
Go back to general information
Topic
Recordj
Recordn
Closep
Cracksq(Brougt to you by the mighty Hackers nests
Registration|
Vers}
Serial
Program name
View As
View As
Close
Recordi
Delete
Recordj
Recordn
Closep
Cracksq(Brougt to you by the mighty Hackers nests
Registration|
Vers}
Serial
Program name
View As
View As
Close
YA7More info, related topics and articles (currently emty)
> I have asked, and seen others ask, for a working serial number for ircle
> 3.09b. There is generally no response. The few serial numbers I have seen
> posted here do not work. The list of numbers in Hackers Helper including
> the most current November issue do not work. I conclude the program's
> protection scheme has beat the best... I suggest
t Ircle is NOT crack-proof because I know that at least
Hacker's Helper should
> report this fact instead of listing serial numbers that do not work.
Ircle 3.0b9 is the source of much consternation obviously. I myself ran
into the same problems you did. Here are the serial numbers that I have
for Ircle3.0b9:
8633-9474-1461
6620-4768-1583
6909-8344-1490
0632-1892-4146
9524-8159-5198
7033-6842-2602
If none of these work, complain again and we'll see about finding more. I
assure you that Ircle is NOT crack-proof because I know that at least
of these serial numbers worked for me ( while I was waiting for my
personal code...don't forget to register shareware! <GRIN> ). I think that
Ircle3.0b9 has a few different versions and that depending on which
version you have the SNs for the others won't work...tricky, huh?
i Troubles registering Ircle 3.0b9
ue do not work. I conclude the program's
> protection scheme has beat the best... I suggest
Pro 2.0 - 2.1F!
Pro 3.0 - 4.0M1
Pro 3.0M1
A$A,b8bD!D!D D @ <@8`8`8
<a@aD
Y#aD]DQ$8
=G9G,
(A,b@ D HBLcDa8A<a<a@
b b c
B C B c B
!$ 0 8bDc@b<A8@8a8`8a@AD
Y%YDU
MgMG8
ffffff
ffff33
ff33ff
ff3333
33ffff
33ff33
3333ff
333333
wwwwww
UUUUUU
DDDDDD
""""""
HH||H
||HH||
HH|HH
u are done.
Realmz 4.1.1 To register Realmz enter 911 as Registration Code in the About Box and click on Register. Then you will be asked for a Serial Number, which is 1794683670 . After
this enter 1121677394 as Registration Code, click on Register, type in a name of
your choice and you are done.
Assault on Giant Mountain 3.0 Name: Tim Phillips
Ser.#: 1369115096
Castle in the Clouds 3.0.1 Name: Tim Phillips
Ser.#: 616398176
Destroy the Necronomicon 3.0 Name: Tim Phillips
Ser.#: 1175CD52804
Prelude to Pestilence 2.5 Name: Tim Phillips
Ser.#: 597431732
Use IceCrack 4.0 or newer
s document for educational purposes, ie. for other people to learn some of the basics. Thank Fantasoft for creating such an easily hackable product that has given people hours of cracking enjoyment. :)
The Equipment: (Hardware and Software)
Basic Stuff:
You need a Macintosh, either a 68xxx or PPC will do
Realmz 3.0.1, available from shareware.com
Hacking/Cracking Stuff:
ResEdit: (and the Code Viewer for it) The combination of these two is sometimes known as SuperResEdit. The
CodeViewer enables you to view the Code Resource of a file as assembly instructions. ResEdit is simply a resource editor and documentation can be found at Apple's Web site. (Both the documentation for ResEdit and ResEdit itself are free.)
MacsBug: This is a very good debugging program which can also be found at Apple's web sites, as can documentation for it, although there is some built in. [the current version is 6.5.3]
Studio ProS&Please see the entry Strata Studio ProU
vAliasf
_E Studio/32
MOZCOT
870550
CoMOZZ
50486304U
11-15f
Cross PlatformT
Name: MoonDark
-Registration Code: 81098692 - Network EditionU
v1.0f
E FlashbackT
FBKA-868-001940
A Unlock Code: WFUV54ZWSAW94RF89UM
Name: Moon DarkU
v1.0f
atch.f238f.hd". This devilish little bugger had the user code so f&$ing visible in it (the programmers obviously thought hiding and locking thB
is file would suffice, and thus did not ecrypt anything in it) that it was a piece of cake to change the user code to the one found in Hackers Helper. After that, registering was a no-brainer.
user code is: AKWJTEBE
serial will be: MQBBGMPU
MOZCOT
870550
CoMOZZ
50486304U
11-15f
Cross PlatformT
Name: MoonDark
-Registration Code: 81098692 - Network EditionU
v1.0f
E FlashbackT
FBKA-868-001940U
v1.0f
E Exile III
Exile III (and other versions of Exile)
"Key = (((((Code * Code) + 50) % 3000) * 81) % 10000) + 10000 where 'Code' is number given to you by the game, and % is the modulus operator." This is the algorithim given to you by Hackers Helper. (Who cares what date) But the question is: What the heck is the modulus operator? The modulus operator is much simpler than it sounds. All you do is take the numbers on either side, divide them, and use the remainder as the continuing number.
EXAMPLE:
7 % 2 = 1 (Where % is the modulus operator) Why? Because 7/2
= 3 r1. The remainder is the answer. If you are still stuck here an example using the Exile algorithim:
- Just change X with any letter/number except 1 and 0
[zero that is].
xxxx-xxxx-xxxx-xxxx-xxxx-xUx5
FFFF-xxxx-ADEG-2453-4444-xUx5
2344-2344-ABCD-2344-2344-xUx5
66PH-EBER-CRC7-
FDE-STRU-CUT5
v2.0r5f
Dream Solver '95 Summer Edition
3415037668882416
Dreamrom
E Drive PRO
LAKS11
2.0cf
Drive Rocket Utility
89549
1.15f
Ear TrainingT
Name: F U Z F U Z
(you MUST put a space between each letter!)
Code: 40 40
(again there must be a space between the 40's!)
v2.3f
Easy TransferT
BT-001-338TU
v3.4.3f
Time and time again I had tried registering MacAttack (with the serial from Hackers Helper that is), but since the user code in the
registration dialog didn't match the info in Hackers Helper (or any other serials archive) there was just no way of doing it. Until I accidentally stumbled across an invisible locked file in the system folder called "scratch.f238f.hd". This devilish little bugger had the user code so f&$ing visible in it (the programmers obviously thought hiding and locking thB
is file would suffice, and thus did not ecrypt anything in it) that it was a piece of cake to change the user code to the one found in Hackers Helper. After that, registering was a no-brainer.
(.txt)