------------ HOW TO FIND REAL SERIAL NUMBER BY USING SOFTICE ---------------


Program : IPsearch Ver 1.3
File Size : 1.17MB
Web-site : http://www.worldlynx.net/pgerhart/
Cracked By : Ex3cutor
Email : Ex3cutor@hotmail.com


About the program :


IPsearch lets you search the Internet's IP address space - give it a starting IP address and it sequentially searches for HTTP ports and reports summary HTML content. IPSearch can also do a complete Whois function and can convert domain names to IP addresses. Results can be saved and printed.

IPSearch comes with a complete Help file and is for Win95/98 and WinNT/2K.



******************** START SEARCHING FOR THE REAL LICENCE KEY *****************************


1) Start IPsearch Ver 1.3

   Go to 'File' --> 'Register...' to show the registration box.

   Key in as follows :

   Name : Executor TNT
   Code : 12345678


2) Do NOT click 'Valide My Codes'!

   Fire up SoftIce by pressing "Ctrl D" and set a breakpoint as follow :

   bpx hmemcpy [Enter]

   then press F5 to return back to the program

3) Now, click 'Valide My Codes' to go back to SoftIce.

   Within SoftIce, press F5 once !

   then, type

   bc * [Enter] to clear our breakpoint

   Then, press F11 once followed by F12 8 times to reach to the following codes :


   00403A11 6A32                    push 00000032
   00403A13 8B4DFC                  mov ecx, dword ptr [ebp-04]
   00403A16 83C164                  add ecx, 00000064
   00403A19 51                      push ecx
   00403A1A 8B5508                  mov edx, dword ptr [ebp+08]
   00403A1D 52                      push edx


   If nothing goes wrong, you'll stop at

   00403A11 6A32                    push 00000032


4) Now set another break point as follows :

   bpx 402DA8 [Enter]

   Press F5 once

   We'll then step into the following codes :

   00402DA8 E8BB900000              Call 0040BE68
   00402DAD 898578FFFFFF            mov dword ptr [ebp+FFFFFF78], eax
   00402DB3 8D4588                  lea eax, dword ptr [ebp-78]
   00402DB6 50                      push eax
   00402DB7 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
   00402DBD E8BAFCFFFF              call 00402A7C
   00402DC2 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
   00402DC8 C645FC01                mov [ebp-04], 01
   00402DCC 8D4D88                  lea ecx, dword ptr [ebp-78]
   00402DCF E8DC020000              call 004030B0
   00402DD4 85C0                    test eax, eax
   00402DD6 0F8580000000            jne 00402E5C
   00402DDC 8D4DEC                  lea ecx, dword ptr [ebp-14]
   00402DDF 51                      push ecx
   00402DE0 8D5588                  lea edx, dword ptr [ebp-78]
   00402DE3 52                      push edx
   00402DE4 E817030000              call 00403100
   00402DE9 25FF000000              and eax, 000000FF
   00402DEE 85C0                    test eax, eax
   00402DF0 746A                    je 00402E5C

   If nothing goes wrong, you'll stop at

   00402DA8 E8BB900000              Call 0040BE68

5) Now press F10 17 times to stop at

   00402DE9 25FF000000              and eax, 000000FF

   Type

   d edx [Enter]

   What did you see ? Our REAL code is there !!! (which is E327362C in this case !)

6) Exit SoftIce and enter this REAL code (E327362C). You'll then be welcomed by a "Thank-you"
   message !


   Enjoy :)