------------ HOW TO FIND REAL SERIAL NUMBER BY USING SOFTICE --------------- Program : WebAndSee Version 1.30 File Size : 457KB Web-site : http://www.logipole.com/indexe.html Cracked By : Ex3cutor Email : Ex3cutor@hotmail.com About the program : WebAndSee is a 32 bit software designed for Windows 9x, ME, NT 4 and 2000 allowing a quick visualisation of the graphic files usually used on the Internet. WebAndSee creates HTML pages which can be seen out or online with your preferred browser (Internet Explorer, Netscape, Opera...). In these HTML pages the selected graphic files will be shown (real size or thumbnails) and described according your setup. ******************** START SEARCHING FOR THE REAL LICENCE KEY ***************************** 1) Start WebAndSee Version 1.30 Go to 'Help' -> 'Register' to show the registration box Key in as follows : Name : First Name : Ex3cutor Key : 1234567890 2) Press 'OK' .... An error message will appear to say that your key is INVALID ! This is expected as our key is FAKE ! What we do now is to remember the error message : "Invalid Key Please enter your name and key as they have been delivered to you" 3) Now, disassemble the program and do a dead listing by W32Dasm ... Go to 'Refs' -> 'String Data References' and search for our error message "Invalid Key" It will lead you to the following codes : * Possible StringData Ref from Data Obj ->"Invalid key" | :0040426B 687C444100 push 0041447C :00404270 55 push ebp 4) Trace the codes a bit backward, and stop at * Referenced by a (U)nconditional or (C)onditional Jump at Address: |:0040421B(C) | :0040423C 8B442410 mov eax, dword ptr [esp+10] :00404240 8D9424BC000000 lea edx, dword ptr [esp+000000BC] :00404247 35F0BD6824 xor eax, 2468BDF0 :0040424C 52 push edx :0040424D A3245B4100 mov dword ptr [00415B24], eax :00404252 E8852D0000 call 00406FDC :00404257 8B0D245B4100 mov ecx, dword ptr [00415B24] :0040425D 83C404 add esp, 00000004 :00404260 3BC1 cmp eax, ecx :00404262 742E je 00404292 * Possible Reference to String Resource ID=00016: "WebAndSee settings" | :00404264 6A10 push 00000010 * Possible StringData Ref from Data Obj ->"Register" | :00404266 6824454100 push 00414524 * Possible StringData Ref from Data Obj ->"Invalid key" | :0040426B 687C444100 push 0041447C :00404270 55 push ebp See the code at 00404260 ? It is a comparison !!! (cmp eax, ecx) This is a good place where we start ! We can assume this is where the FAKE key and the REAL key are compared ! If they are equal, it will jump directly to the code 00404292. Otherwise, just print out the error message ! So, remember this code address : 0040423C 5) Ok ! Let's start to fnd the REAL key by SOftIce now ! Repeat step (1) However, do NOT press 'OK' this time ! Fire up SoftIce by pressing "Ctrl D" and set a breakpoint as follow : bpx getdlgitemtexta [Enter] then press F5 to return back to the program 6) Now, click "OK" to go back to SoftIce. Type bc * [Enter] to clear our breakpoint Then, press F12 ONCE to reach to the following codes : :004040C1 85C0 test eax, eax :004040C3 7538 jne 004040FD If nothing goes wrong, you'll be stopped at :004040C1 85C0 test eax, eax 7) Set another break point by typing bpx 0040423C [Enter] Press F5 ONCE ! If nothing goes wrong, you'll stop at the following codes : :0040423C 8B442410 mov eax, dword ptr [esp+10] :00404240 8D9424BC000000 lea edx, dword ptr [esp+000000BC] :00404247 35F0BD6824 xor eax, 2468BDF0 :0040424C 52 push edx :0040424D A3245B4100 mov dword ptr [00415B24], eax :00404252 E8852D0000 call 00406FDC :00404257 8B0D245B4100 mov ecx, dword ptr [00415B24] :0040425D 83C404 add esp, 00000004 :00404260 3BC1 cmp eax, ecx :00404262 742E je 00404292 8) Press F10 twice to reach :00404247 35F0BD6824 xor eax, 2468BDF0 Type d edx [Enter] What did you see ?? it's our FAKE key ! (which is 1234567890 at this case) 9) Press F10 4 more times to reach :00404257 8B0D245B4100 mov ecx, dword ptr [00415B24] Type ? eax [Enter] What did you see this time ??? It's our FAKE key again ! 10) Press F10 1 more time to reach :0040425D 83C404 add esp, 00000004 In order to retrieve the REAL key, what we need to do is just to type ? ecx [Enter] HeHeHe .... Here we go - the REAL key ! (which is 3684123258) 11) Exit SoftIce and register again with the REAL key ! Go to 'Help' -> 'About WebAndSee' Wow ! This software is now registered !!! Enjoy :) ******************************** END ***************************************