-------------------------------------------------------
How to find a serial for PixWeb99
-------------------------------------------------------

Cracker: iNFiNiTY 

Target: PixWeb 99 v1.4.0
Tools: SoftIce (no SmartCheck, in S-I is it faster)
           Brain

Where: http://www.techsono.com (7,17 MB - too big) 

Sorry for my english, its not my mother language.

-----------------
Some info: 
-----------------

This is a Visual Basic program so we donīt use 
"bpx hmemcpy" but "bpx msvbvm60__vbastrcomp"
If you canīt set this breakpoint, you must edit your
WINICE.DAT and write there this:
EXP=c:\windows\system\msvbvm60.dll
Save changes and reboot. Try again. Yes - we got it!

-----------
Step 1:
-----------


Run progg., go to Register on Menu panel,
enter name and any s/n. Switch to SoftIce,
set breakpoint on 
push REGISTER. B00M. We are in SI.

Press twice key "F5" because we have two 
input boxes. We are here:

MSVBVM60!__vbaStrcomp
015F:660416C	CMP DWORD PTR [ESP+04], 02	<-- we land here	
015F:6604171	JZ 660472C7
015F:6604177	PUSH 00030001
015F:660417C	PUSH DWORD PTR [ESP+08]
015F:6604180	PUSH DWORD PTR [ESP+10]
015F:6604184	PUSH DWORD PTR [ESP+18]
015F:6604188	CALL [6610EE58]
015F:660418E	TEST EAX, EAX
015F:6604190	JL 660472CE
015F:6604196	DEC EAX
015F:6604197	RET


Now press 12x "F10" key to go through all RETs.
Here you must be:
 
0046F9AE	NEG EAX
0046F9B0	SBB EAX, EAX
0046F9B2	NEG EAX
0046F9B4	DEC EAX
0046F9B5	OV [EBP-24], EAX
0046F9B8	CALL [MSVBVM60!__vbaExiObj]
0046F9BE	PUSH 0046FB5A
0046F9C3	JMP 0046FB50		<--- go past this jump (push "F10" one times(



Where you land??? HERE!!!


0046F94F	RET
0046FB50	LEA ECX, [ EBP-28]		<--- YeS


On this line youīll see in the right top corner this:

SS:072F2EC=005244FC

Now type " d 005244FC " and in data window you should
see something like this: 

s.e.r.i.a.l.n.u.m.b.e.r...	<--- this is the REAL S/N (in the wide-char)
.................................
.................................
.................................

Write the number except the dots (i get 34986)
down.

Try register again - type your name and found s/n.
[[[ Yes ]]] - we are registered user.

You can use found # for other techsono programs.

=============================
If i make a mistake, please e-mail me 
to algo.rhythm@worldonline.cz.
Iīm a newbie so if you can help me or
if you want to advise me please 
contact me.			
=============================
=============================
Thanks to all crackers on the web !!!
=============================