------------ HOW TO FIND REAL SERIAL NUMBER BY USING SOFTICE ---------------


Program : WebAndSee Version 1.30
File Size : 457KB
Web-site : http://www.logipole.com/indexe.html
Cracked By : Ex3cutor
Email : Ex3cutor@hotmail.com


About the program :


WebAndSee is a 32 bit software designed for Windows 9x, ME, NT 4 and 2000 
allowing a quick visualisation of the graphic files usually used on the 
Internet.
WebAndSee creates HTML pages which can be seen out or online with your 
preferred browser (Internet Explorer, Netscape, Opera...).
In these HTML pages the selected graphic files will be shown (real size or 
thumbnails) and described according your setup.


******************** START SEARCHING FOR THE REAL LICENCE KEY 
*****************************


1) Start WebAndSee Version 1.30

   Go to 'Help' -> 'Register' to show the registration box

   Key in as follows :

   Name : <TNT>
   First Name : Ex3cutor
   Key : 1234567890


2) Press 'OK' ....

   An error message will appear to say that your key is INVALID !

   This is expected as our key is FAKE !

   What we do now is to remember the error message :

   "Invalid Key
    Please enter your name and key as they have been delivered to you"


3) Now, disassemble the program and do a dead listing by W32Dasm ...

   Go to 'Refs' -> 'String Data References' and search for our error message 
"Invalid Key"

   It will lead you to the following codes :

   * Possible StringData Ref from Data Obj ->"Invalid key"
                                  |
   :0040426B 687C444100              push 0041447C
   :00404270 55                      push ebp


4) Trace the codes a bit backward, and stop at

   * Referenced by a (U)nconditional or (C)onditional Jump at Address:
   |:0040421B(C)
   |
   :0040423C 8B442410                mov eax, dword ptr [esp+10]
   :00404240 8D9424BC000000          lea edx, dword ptr [esp+000000BC]
   :00404247 35F0BD6824              xor eax, 2468BDF0
   :0040424C 52                      push edx
   :0040424D A3245B4100              mov dword ptr [00415B24], eax
   :00404252 E8852D0000              call 00406FDC
   :00404257 8B0D245B4100            mov ecx, dword ptr [00415B24]
   :0040425D 83C404                  add esp, 00000004
   :00404260 3BC1                    cmp eax, ecx
   :00404262 742E                    je 00404292

   * Possible Reference to String Resource ID=00016: "WebAndSee settings"
                                  |
   :00404264 6A10                    push 00000010

   * Possible StringData Ref from Data Obj ->"Register"
                                  |
   :00404266 6824454100              push 00414524

   * Possible StringData Ref from Data Obj ->"Invalid key"
                                  |
   :0040426B 687C444100              push 0041447C
   :00404270 55                      push ebp


   See the code at 00404260 ?
   It is a comparison !!! (cmp eax, ecx)

   This is a good place where we start !

   We can assume this is where the FAKE key and the REAL key are compared !

   If they are equal, it will jump directly to the code 00404292.
   Otherwise, just print out the error message !

   So, remember this code address : 0040423C


5) Ok ! Let's start to fnd the REAL key by SOftIce now !

   Repeat step (1)

   However, do NOT press 'OK' this time !

   Fire up SoftIce by pressing "Ctrl D" and set a breakpoint as follow :

   bpx getdlgitemtexta [Enter]

   then press F5 to return back to the program



6) Now, click "OK" to go back to SoftIce.

   Type

   bc * [Enter] to clear our breakpoint

   Then, press F12 ONCE to reach to the following codes :

   :004040C1 85C0                    test eax, eax
   :004040C3 7538                    jne 004040FD


   If nothing goes wrong, you'll be stopped at

   :004040C1 85C0                    test eax, eax


7) Set another break point by typing

   bpx 0040423C [Enter]

   Press F5 ONCE !

   If nothing goes wrong, you'll stop at the following codes :


   :0040423C 8B442410                mov eax, dword ptr [esp+10]
   :00404240 8D9424BC000000          lea edx, dword ptr [esp+000000BC]
   :00404247 35F0BD6824              xor eax, 2468BDF0
   :0040424C 52                      push edx
   :0040424D A3245B4100              mov dword ptr [00415B24], eax
   :00404252 E8852D0000              call 00406FDC
   :00404257 8B0D245B4100            mov ecx, dword ptr [00415B24]
   :0040425D 83C404                  add esp, 00000004
   :00404260 3BC1                    cmp eax, ecx
   :00404262 742E                    je 00404292



8) Press F10 twice to reach

   :00404247 35F0BD6824              xor eax, 2468BDF0

   Type d edx [Enter]

   What did you see ?? it's our FAKE key ! (which is 1234567890 at this 
case)


9) Press F10 4 more times to reach

   :00404257 8B0D245B4100            mov ecx, dword ptr [00415B24]

   Type ? eax [Enter]

   What did you see this time ??? It's our FAKE key again !


10) Press F10 1 more time to reach

   :0040425D 83C404                  add esp, 00000004

    In order to retrieve the REAL key, what we need to do is just to type

    ? ecx [Enter]

    HeHeHe .... Here we go - the REAL key ! (which is 3684123258)


11) Exit SoftIce and register again with the REAL key !

    Go to 'Help' -> 'About WebAndSee'

    Wow ! This software is now registered !!!


    Enjoy :)


********************************  END  
***************************************