* Referenced by a CALL at Addresses:
|:004246CC   , :004246DC   , :004576B6   , :004576C7   , :00488C9E   
|:00488CAF   
|
:00439116 55                      push ebp
:00439117 89E5                    mov ebp, esp
:00439119 53                      push ebx
:0043911A 81ECF4010000            sub esp, 000001F4
:00439120 51                      push ecx
:00439121 57                      push edi
:00439122 8D7C2408                lea edi, dword ptr [esp+08]
:00439126 B8CCCCCCCC              mov eax, CCCCCCCC
:0043912B B97D000000              mov ecx, 0000007D
:00439130 F3                      repz
:00439131 AB                      stosd
:00439132 5F                      pop edi
:00439133 59                      pop ecx
:00439134 8D8508FEFFFF            lea eax, dword ptr [ebp+FFFFFE08]
:0043913A 50                      push eax
:0043913B FF7508                  push [ebp+08]
:0043913E 68E0A55900              push 0059A5E0
:00439143 E87CDCFDFF              call 00416DC4
:00439148 83C40C                  add esp, 0000000C
:0043914B 6A00                    push 00000000
:0043914D 8B1D68E65900            mov ebx, dword ptr [0059E668]
:00439153 8D1CDB                  lea ebx, dword ptr [ebx+8*ebx]
:00439156 01DB                    add ebx, ebx
:00439158 8B0CDD70E65900          mov ecx, dword ptr [8*ebx+0059E670]
:0043915F E8FDB2FCFF              call 00404461
:00439164 8B0D68E65900            mov ecx, dword ptr [0059E668]
:0043916A 69C990000000            imul ecx, 00000090
:00439170 81C16CE65900            add ecx, 0059E66C
:00439176 E8F67EFEFF              call 00421071
:0043917B 6A00                    push 00000000
:0043917D 8B1D68E65900            mov ebx, dword ptr [0059E668]
:00439183 8D1CDB                  lea ebx, dword ptr [ebx+8*ebx]
:00439186 01DB                    add ebx, ebx
:00439188 8B0CDD70E65900          mov ecx, dword ptr [8*ebx+0059E670]
:0043918F E8CDB2FCFF              call 00404461
:00439194 6A08                    push 00000008
:00439196 8D8508FEFFFF            lea eax, dword ptr [ebp+FFFFFE08]
:0043919C 50                      push eax
:0043919D 8B0D68E65900            mov ecx, dword ptr [0059E668]
:004391A3 69C990000000            imul ecx, 00000090
:004391A9 81C16CE65900            add ecx, 0059E66C
:004391AF E801E3FEFF              call 004274B5
:004391B4 6A04                    push 00000004
:004391B6 8B1D68E65900            mov ebx, dword ptr [0059E668]
:004391BC 8D1CDB                  lea ebx, dword ptr [ebx+8*ebx]
:004391BF 01DB                    add ebx, ebx
:004391C1 8B0CDD70E65900          mov ecx, dword ptr [8*ebx+0059E670]
:004391C8 E86BB4FCFF              call 00404638
:004391CD 0FB6C0                  movzx eax, al
:004391D0 50                      push eax
:004391D1 E82BB4FCFF              call 00404601
:004391D6 59                      pop ecx
:004391D7 59                      pop ecx
:004391D8 3C00                    cmp al, 00
:004391DA 7407                    je 004391E3
:004391DC B800000000              mov eax, 00000000
:004391E1 EB7C                    jmp 0043925F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004391DA(C)
|
:004391E3 6A01                    push 00000001
:004391E5 8B1D68E65900            mov ebx, dword ptr [0059E668]
:004391EB 8D1CDB                  lea ebx, dword ptr [ebx+8*ebx]
:004391EE 01DB                    add ebx, ebx
:004391F0 8B0CDD70E65900          mov ecx, dword ptr [8*ebx+0059E670]
:004391F7 E83CB4FCFF              call 00404638
:004391FC 0FB6C0                  movzx eax, al
:004391FF 50                      push eax
:00439200 E8FCB3FCFF              call 00404601
:00439205 59                      pop ecx
:00439206 59                      pop ecx
:00439207 3C00                    cmp al, 00
:00439209 7407                    je 00439212
:0043920B B800000000              mov eax, 00000000
:00439210 EB4D                    jmp 0043925F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439209(C)
|
:00439212 6A02                    push 00000002
:00439214 8B1D68E65900            mov ebx, dword ptr [0059E668]
:0043921A 8D1CDB                  lea ebx, dword ptr [ebx+8*ebx]
:0043921D 01DB                    add ebx, ebx
:0043921F 8B0CDD70E65900          mov ecx, dword ptr [8*ebx+0059E670]
:00439226 E80DB4FCFF              call 00404638
:0043922B 0FB6C0                  movzx eax, al
:0043922E 50                      push eax
:0043922F E8CDB3FCFF              call 00404601
:00439234 59                      pop ecx
:00439235 59                      pop ecx
:00439236 3C00                    cmp al, 00
:00439238 7407                    je 00439241
:0043923A B800000000              mov eax, 00000000
:0043923F EB1E                    jmp 0043925F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439238(C)
|
:00439241 8B0D68E65900            mov ecx, dword ptr [0059E668]
:00439247 69C990000000            imul ecx, 00000090
:0043924D 81C16CE65900            add ecx, 0059E66C
:00439253 E8197EFEFF              call 00421071
:00439258 B801000000              mov eax, 00000001
:0043925D EB00                    jmp 0043925F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004391E1(U), :00439210(U), :0043923F(U), :0043925D(U)
|
:0043925F 8D65FC                  lea esp, dword ptr [ebp-04]
:00439262 5B                      pop ebx
:00439263 5D                      pop ebp
:00439264 C3                      ret

                                  |
:0045767C 683335F707              push 07F73533

* Possible StringData Ref from Data Obj ->"No VERSION-6.0 CD found! X-Plane "
                                        ->"is operating in demo mode."
                                  |
:00457681 685D35F707              push 07F7355D
:00457686 6A00                    push 00000000
:00457688 E8C062FCFF              call 0041D94D
:0045768D 83C418                  add esp, 00000018
:00457690 C70564C3CE0901000000    mov dword ptr [09CEC364], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457648(C), :0045765B(C), :00457664(C)
|
:0045769A 833D64C3CE0900          cmp dword ptr [09CEC364], 00000000
:004576A1 0F8482000000            je 00457729
:004576A7 C70564C3CE0900000000    mov dword ptr [09CEC364], 00000000

* Possible StringData Ref from Data Obj ->"FIDELITY BUILD.txt"
                                  |
:004576B1 689935F707              push 07F73599
:004576B6 E85B1AFEFF              call 00439116
:004576BB 59                      pop ecx
:004576BC 8985CCFCFFFF            mov dword ptr [ebp+FFFFFCCC], eax

* Possible StringData Ref from Data Obj ->"HOW TO INSTALL VERSION 6.txt"
                                  |
:004576C2 68AC35F707              push 07F735AC
:004576C7 E84A1AFEFF              call 00439116
:004576CC 59                      pop ecx
:004576CD 8985C8FCFFFF            mov dword ptr [ebp+FFFFFCC8], eax
:004576D3 BA00000000              mov edx, 00000000
:004576D8 83BDCCFCFFFF00          cmp dword ptr [ebp+FFFFFCCC], 00000000
:004576DF 750E                    jne 004576EF
:004576E1 83BDC8FCFFFF00          cmp dword ptr [ebp+FFFFFCC8], 00000000
:004576E8 7505                    jne 004576EF
:004576EA BA01000000              mov edx, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004576DF(C), :004576E8(C)
|
:004576EF 891550028D02            mov dword ptr [028D0250], edx
:004576F5 8B85CCFCFFFF            mov eax, dword ptr [ebp+FFFFFCCC]
:004576FB A34CA68002              mov dword ptr [0280A64C], eax
:00457700 833D50028D0200          cmp dword ptr [028D0250], 00000000
:00457707 7520                    jne 00457729
:00457709 6A0F                    push 0000000F
:0045770B 68C935F707              push 07F735C9

* Possible StringData Ref from Data Obj ->"Next time put the CD in before "
                                        ->"you start X-Plane to avoid this "
                                        ->"annoyance!"
                                  |
:00457710 68CA35F707              push 07F735CA

* Possible StringData Ref from Data Obj ->"I am taking you out of demo mode "
                                        ->"now!"
                                  |
:00457715 681436F707              push 07F73614

* Possible StringData Ref from Data Obj ->"OK I found the CD!"
                                  |
:0045771A 683A36F707              push 07F7363A
:0045771F 6A00                    push 00000000
:00457721 E82762FCFF              call 0041D94D
:00457726 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004576A1(C), :00457707(C)
|
:00457729 833D50028D0200          cmp dword ptr [028D0250], 00000000
:00457730 0F8498000000            je 004577CE
:00457736 D905FC018D02            fld dword ptr [028D01FC]
:0045773C D81D3C2FF707            fcomp dword ptr [07F72F3C]
:00457742 DFE0                    fstsw ax
:00457744 F6C445                  test ah, 45
:00457747 0F8581000000            jne 004577CE
:0045774D 833D60C3CE0900          cmp dword ptr [09CEC360], 00000000
:00457754 7578                    jne 004577CE
:00457756 C70560C3CE0901000000    mov dword ptr [09CEC360], 00000001
:00457760 6860E45900              push 0059E460
:00457765 68E0A55900              push 0059A5E0

* Possible StringData Ref from Data Obj ->"I do not detect an X-Plane 6.0 "
                                        ->"or later CD in the following drive: "
                                  |
:0045776A 684D36F707              push 07F7364D
:0045776F E850F6FBFF              call 00416DC4
:00457774 83C40C                  add esp, 0000000C
:00457777 6860E45900              push 0059E460

* Possible StringData Ref from Data Obj ->" so I shall now ignore your joystick "
                                        ->"input since you have not put the "
                                        ->"X-Plane 6.0 or later CD in that "
                                        ->"drive!"
                                  |
:0045777C 689136F707              push 07F73691
:00457781 6860E45900              push 0059E460
:00457786 E839F6FBFF              call 00416DC4
:0045778B 83C40C                  add esp, 0000000C
:0045778E 6A0F                    push 0000000F
:00457790 68C935F707              push 07F735C9

How-to crack X-Plane 6.60 RC-3
Used disassembler W32Dasm version 8.9

1) disasemble X-Plane 660.exe
2) find string "I do not detect an X-Plane 6.0" - is in the location code.txt :00457765
3) function called from addres :004576C7 - call 00439116 is function, that returns in register EAX "00000000", if not in the CD-ROM original CD and "00000001", if found in CD-ROM original CD.
4) is demand ensure, that the function "function.txt" always returns in register EAX "00000001".

5) return from this function is possible from this addreses :004391E1(U), :00439210(U), :0043923F(U), :0043925D(U) In 3 first addreses is (one instruction back) mov eax,00000000 and in the last is 00000001.
6) in this 3 locations :004391DC, :0043920B, :0043923A is demand this code: "B800000000 -- mov eax, 00000000" replace this new code: "B800000000 -- mov eax, 00000001"
7) In hexaeditor are this codes at there positions 385DC, 3860B, 3863A  replace this "b8 00 00 00 00" herewith : "b8 01 00 00 00".

thats all; 

Crack for X-Plane v6.60 RC-3
Copy "X-Plane 660 RC-3 crack.exe" to your directory contains file "X-Plane 660.exe".
Run "X-Plane 660 RC-3 crack.exe".
Use button "Patch".

thats all;