------------ HOW TO FIND REAL SERIAL NUMBER BY USING SOFTICE --------------- Program : CleanUp Ver 1.9 File Size : 1.18MB Web-site : http://www.worldlynx.net/pgerhart/ Cracked By : Ex3cutor Email : Ex3cutor@hotmail.com About the program : CleanUp searches you drives potentially unwanted files so you can deal with them all with just one click. You can identify unwanted files by extension type (*.tmp for example), exclude files of a certain name, protect folders from being searched, search for zero-length files and so on. You can even have CleanUp clean your Temp directories and purge your Netscape and IE cache & URL history. You get to review every file before any actions are taken. And if you are a little wary of deletions, you can direct CleanUp to move the files to a destination folder (like the Recycle Bin). CleanUp is for Win95/98 and WinNT/2K. ******************** START SEARCHING FOR THE REAL LICENCE KEY ***************************** 1) Start CleanUp Ver 1.9 Go to 'File' --> 'Register...' to show the registration box. Key in as follows : Name : Executor TNT Code : 12345678 2) Do NOT click 'Valide My Codes'! Fire up SoftIce by pressing "Ctrl D" and set a breakpoint as follow : bpx hmemcpy [Enter] then press F5 to return back to the program 3) Now, click 'Valide My Codes' to go back to SoftIce. Within SoftIce, press F5 once ! then, type bc * [Enter] to clear our breakpoint Then, press F11 once followed by F12 8 times to reach to the following codes : 0040AB51 6A32 push 00000032 0040AB53 8B4DFC mov ecx, dword ptr [ebp-04] 0040AB56 83C164 add ecx, 00000064 0040AB59 51 push ecx 0040AB5A 8B5508 mov edx, dword ptr [ebp+08] 0040AB5D 52 push edx If nothing goes wrong, you'll stop at 0040AB51 6A32 push 00000032 4) Now set another break point as follows : bpx 4090B8 [Enter] Press F5 once We'll then step into the following codes : 004090B8 E8275C0000 Call 0040ECE4 004090BD 898578FFFFFF mov dword ptr [ebp+FFFFFF78], eax 004090C3 8D4588 lea eax, dword ptr [ebp-78] 004090C6 50 push eax 004090C7 8B8D7CFFFFFF mov ecx, dword ptr [ebp+FFFFFF7C] 004090CD E859F5FFFF call 0040862B 004090D2 898574FFFFFF mov dword ptr [ebp+FFFFFF74], eax 004090D8 C645FC01 mov [ebp-04], 01 004090DC 8D4D88 lea ecx, dword ptr [ebp-78] 004090DF E8EC010000 call 004092D0 004090E4 85C0 test eax, eax 004090E6 0F8580000000 jne 0040916C 004090EC 8D4DEC lea ecx, dword ptr [ebp-14] 004090EF 51 push ecx 004090F0 8D5588 lea edx, dword ptr [ebp-78] 004090F3 52 push edx 004090F4 E807CBFFFF call 00405C00 004090F9 25FF000000 and eax, 000000FF 004090FE 85C0 test eax, eax If nothing goes wrong, you'll stop at 004090B8 E8275C0000 Call 0040ECE4 5) Now press F10 17 times to stop at 004090F9 25FF000000 and eax, 000000FF Type d edx [Enter] What did you see ? Our REAL code is there !!! (which is C7A9BBCC in this case !) 6) Exit SoftIce and enter this REAL code (C7A9BBCC). You'll then be welcomed by a "Thank-you" message ! Enjoy :)