-----------------------------------------------------+
These informations are for educational purposes only!|
-----------------------------------------------------+

þ¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿þ



               00000              00000000            0000  0000      
      377O    00000      J77t    30000000  O7J  t7W   000Q 0000      H0000
   d00000000  00000    00000000  0000;    0000000000  000 J000       0000
   0003 0000 00000   W0000 0000  0000    W0000 00000  000W000        
  0000   ,0  0000O   0000 c0000 0000000d 0000  0000  c000000    0ZZ 0000
  000000    00000   0000000000  0000000  0000 0000U  200000   0000000000
    W00000  0000Q   0000       00000    0000  0000   U0000   00000 0000
 W    0000 00000   0000d 0000 :0000    00000 0000Q   0000;  00000    
0000t 000; 0000St0 0000 3000  00000 0d 0000  0000   t0000   0000Q  0000
000000000 00000000 00000000, 00000000 S000000000    00000  c0000  00000
  HZZH    00ZZZZ0    HZWZ    00ZZZZZH 0000  QQ,    :0QW0   U0000000000 
                                     t077H                  H0000U   


Cracking Tutorial #2:
CRACKING(?) MATH WORKSHOP 2.0
[cracked bY:] sLeEpY¿[FWA/NWA/FTPR8Z] iN 12/2001
[difficulty:] beginner
[where:] I borrowed the cd from radio shack.

þ¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿þ

tOOLZ: w32dasm 8.93, nah.. lets just use notepad 

this was going to be a cracking tutorial but ending up being to easy 
and no hardcore cracking was needed, but none the less it is good for
some basic learning

-----------------------------------------
make 3 copies of math32.exe, name one math32.W32 and one math32.bak


start the game w/o the cd
you'll get an error msg
"Math Workshop CD must be inserted in drive X" (where X is your cdrom)

open math32.W32 in w32dasm89.exe (windows disassembler, very nice)
click on string referance button and look for the error msg
double click it when you find it, it should take you here:

ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì


:00476398 7415				je 004763AF
:0047639A OFBE85D4FEFFFF		movsx eax, byte ptr [ebp+FFFFFED4]
:004763A1 50				push eax

"Math Workshop CD must be inserted in drive %c"

:004763A2 68300F4A00			push 004A0F30
 
ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì

we go upward to look for the jump (why because code reads down just
like when you read a book)
first is at: 

ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì

:00476398 7415				je 004763AF

so we change the je to jne (jump if equal to) changed to (jump if not equal to)
or you could change it to jmp where it will jump unconditionally
(basically what we are saying is if the cd is in the drive, then it is what the code 
wants, jump if equal to, if we change it to jump if not equal to then if it doesnt 
find the cd it will jump instead of error msg)

open HIEW
open the math32.exe in the math32 dir

find the offset (F7)

ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì

0002b3f1: 74				je	00002B408

(F3 for editing)
change the 74 to 75 (je to jne) 

0002b3f1: 75				jne	

ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì

WELL SHIT!
This code change does nothing, no good, lets go back to w32dasm and look for another...


well while looking for another we find a reference for "milkyway.dat"

So maybe this will be easier than we think?
Doing a search for it finds it nowhere, so i ran a search on the cd!
there it is in the data folder on the cd
DATA\milkyway.dat
hmm, this could be a cake, with no hacking needed
copy the entire DATA folder as there is more calls for files in there
to your C drive, so you should have C:\DATA\bunch of stupid files
if you remember the "Math Workshop CD must be inserted in drive %c"
% could mean any drive
well how do we change the drive you ask, easy as cake, open a simple file:
math32.cfg (open in notepad)

whats in here:

[INSTALL]
INSTALLFROMDIR=G:\SETUP32\
InstallFromRoot=G:\
InstallToDir=C:\Program Files\Math Workshop v2.0\
InstallToDrive=C
InstallFromDrive=G
[directories]
InstallFromRoot=G:
InstallToDir=C:\Program Files\Math Workshop v2.0
InstallFromDir=G:\SETUP32

well lets start with the first one:

[INSTALL]
INSTALLFROMDIR=C:\SETUP32\       <--------G to a C
InstallFromRoot=G:\
InstallToDir=C:\Program Files\Math Workshop v2.0\
InstallToDrive=C
InstallFromDrive=G
[directories]
InstallFromRoot=G:
InstallToDir=C:\Program Files\Math Workshop v2.0
InstallFromDir=G:\SETUP32

Save the file, run math32.exe
game works great!

no hardcore cracking needed, now you have a warez release!

çèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèéêëèç

DIR STRUCTURE LIKE THIS WHEN FINISHED:

 Volume in drive C is WINXP
 Volume Serial Number is XXXX-XXXX

 Directory of C:\DATA

12/16/2001  09:28 PM              .
12/16/2001  09:28 PM              ..
01/10/1997  06:39 AM            27,328 MILKYWAY.DAT
02/26/1997  04:51 AM         1,625,516 TITLE.MHK
09/26/1994  10:58 AM           100,000 BKG.WMF
04/02/1997  10:08 AM         5,306,988 BOILERRM.MHK
04/03/1997  03:39 AM           434,401 BOWL2.MHK
09/26/1994  10:58 AM        12,720,320 BOWLING.DAT
09/26/1994  10:58 AM           242,947 CREDITS.DAT
04/01/1997  04:04 AM           459,322 CREDITS.MHK
09/26/1994  10:58 AM         1,949,606 GUS.DAT
09/08/1994  08:10 AM         6,845,498 HIDDEN.DAT
04/07/1997  10:31 AM        11,951,942 MAINPICK.MHK
09/26/1994  10:58 AM         7,756,078 MAINSCRN.DAT
01/09/1997  07:04 AM           126,718 MIDIMAC.DAT
09/26/1994  10:58 AM               262 MIDIMAP.DAT
01/09/1997  07:07 AM           151,438 MIDIMPC.DAT
03/31/1997  01:43 PM         4,917,719 NIM.DAT
09/26/1994  10:58 AM         1,757,492 PATFILL.DAT
09/26/1994  10:58 AM         7,852,542 PATTERNS.DAT
09/26/1994  10:58 AM         5,236,186 POLLY.DAT
09/26/1994  11:58 AM         3,949,983 RHYTHM.DAT
09/26/1994  10:58 AM             2,332 RIB1.WMF
09/26/1994  10:58 AM             2,378 RIB2.WMF
09/26/1994  10:58 AM             2,416 RIB3.WMF
09/26/1994  10:58 AM             2,382 RIB4.WMF
09/26/1994  10:58 AM             2,398 RIBB.WMF
03/19/1997  08:29 AM         3,182,987 RSDEMO.MHK
09/26/1994  10:58 AM         2,073,953 RSHELP.DAT
09/26/1994  10:58 AM             5,783 SITE.DAT
09/08/1994  08:08 AM         5,970,797 STICKLER.DAT
09/26/1994  10:58 AM                72 SYSTEM.DAT
09/26/1994  10:58 AM           582,409 TITLE.DAT
01/23/1997  09:40 AM           104,306 TRACKER.MHK
09/26/1994  10:58 AM            72,961 TROPHY.DAT
12/16/2001  09:34 PM              FONTS
              33 File(s)     85,417,460 bytes

-----------------------------------------

 Volume in drive C is WINXP
 Volume Serial Number is XXXX-XXXX

 Directory of C:\DATA\FONTS

12/16/2001  09:34 PM              .
12/16/2001  09:34 PM              ..
06/27/1994  07:00 PM             6,656 NCSCLB10.FON
06/27/1994  07:00 PM             7,680 NCSCLB12.FON
06/27/1994  07:00 PM             8,704 NCSCLB14.FON
06/27/1994  07:00 PM            11,264 NCSCLB18.FON
06/27/1994  07:00 PM            16,896 NCSCLB24.FON
09/26/1994  10:58 AM            28,524 NEWZBLK.TTF
09/26/1994  10:58 AM            30,584 NEWZBLKO.TTF
09/26/1994  10:58 AM            32,720 NEWZUBOB.TTF
09/26/1994  10:58 AM            35,196 NEWZUBOL.TTF
09/26/1994  10:58 AM            33,452 NEWZUOBL.TTF
02/25/1997  05:42 AM                 0 SGNUM12
11/19/1996  05:45 AM             7,344 SGNUM12_.FON
02/25/1997  05:44 AM                 0 SGNUM14
11/19/1996  05:46 AM             8,256 SGNUM14_.FON
02/25/1997  05:42 AM                 0 SGNUM21
02/13/1997  08:40 AM            18,336 SGNUM21_.FON
02/25/1997  05:40 AM                 0 SGQB12
02/12/1997  08:22 AM             7,344 SGQB12__.FON
11/19/1996  05:47 AM             7,344 SGQUES12.FON
              19 File(s)        260,300 bytes

-----------------------------------------

 Volume in drive C is WINXP
 Volume Serial Number is XXXX-XXXX

 Directory of C:\PROGRA~1\Math Workshop v2.0

10/23/2001  05:33 PM              .
10/23/2001  05:33 PM              ..
10/23/2001  05:35 PM             4,207 DeIsL1.isu
12/16/2001  09:57 PM               259 math32.cfg
06/09/1994  12:00 AM            46,340 MARKET__.TTF
08/19/1994  12:00 AM               262 MIDIMAP.DAT
10/10/1995  09:41 AM               468 MIDIMAP.MHK
04/08/1997  01:23 PM               764 MOHAWK.W32
06/28/1994  12:00 AM             6,656 NCSCLB10.FON
06/28/1994  12:00 AM             7,680 NCSCLB12.FON
06/28/1994  12:00 AM             8,704 NCSCLB14.FON
06/28/1994  12:00 AM            11,264 NCSCLB18.FON
06/28/1994  12:00 AM            16,896 NCSCLB24.FON
09/26/1994  03:58 PM            28,524 NEWZBLK.TTF
09/26/1994  03:58 PM            30,584 NEWZBLKO.TTF
09/26/1994  03:58 PM            32,720 NEWZUBOB.TTF
09/26/1994  03:58 PM            35,196 NEWZUBOL.TTF
09/26/1994  03:58 PM            33,452 NEWZUOBL.TTF
07/21/1993  12:00 AM            40,144 NEWZURCA.TTF
11/19/1996  10:45 AM             7,344 SGNUM12_.FON
11/19/1996  10:46 AM             8,256 SGNUM14_.FON
02/13/1997  01:40 PM            18,336 SGNUM21_.FON
11/19/1996  10:47 AM             7,344 SGQUES12.FON
09/05/1995  11:50 AM               468 SYSTEM.MHK
02/12/1997  01:22 PM             7,344 sgqb12__.fon
04/08/1997  04:27 PM            10,446 Readme.txt
12/16/2001  09:35 PM            80,852 MWROSTER
12/16/2001  09:29 PM               261 math32.cfg.bak  <--backup file (delete me)
04/14/1997  01:56 PM           625,696 Math32.exe.bak  <--backup file (delete me)
04/14/1997  01:56 PM           625,696 Math32.exe
              28 File(s)      2,321,859 bytes


ììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììììì

email me if you are bored: sleepy@linuxwaves.com

                     ._Tutorialz_.                    
[-----------------------------------------------------]
[1. Cracking Cosmi's Generic Installshield Protection ]
[2. CRACKING(?) MATH WORKSHOP 2.0                     ]
[                                                     ]
[                                                     ]
¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿

gReEtz: MiNioN, GreycZ, KlutCh, KiNgEr, MidNight, FWA, NWA, FTPiRatEz! HAR! BEASTFXP!

¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿

CopyLeft sLeEpY¿ [all rights reversed] Boredom causes crackers and babies.

¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿¿