-----------------------------------------------------------------
How to find a serial for Theme Builder 2.0
----------------------------------------------------------------

Cracker: stealthFIGHTER 

Target: Theme Builder 2.0

Tools: SoftIce 
       Brain

Where: sorry

Sorry for my english, its not my mother language.


-----------
Step 1:
-----------

Run Theme Builder, push Register !!!, enter any s/n, 
switch to Soft-Ice, set breakpoint on memory copy (bpx hmemcpy)
go back, push ok =>B00M<=. We are in SI. Push "F5" and "F11"
to get to the caller. Then push 11x "F12" to pass all RETs.
We landed here:


015F:0049CA05		CALL 0043247C	<--- we are here
015F:0049CA0A		MOV EAX, [EBP-01DE]
015F:0049CA10		MOV EDX, 0049CC4C
015F:0049CA15		CALL 0040403C	<--- <| b00m |>
015F:0049CA1A		JNZ 0049CBDE	<--- bad boy

On the line 015F:0049CA15 at the CALL (0040403C) type
"D EDX" and we see something like this:

TBV20...............
82958................
..........................

Write this numbers down. Clear all breakpoinst (bc *)
enter found serials?! But we found only 2 numbers and
we have 3 input boxes. Ops. Newer mind. Enter what we
found and in the 3rd box write ANYTHING!!!

---------------------------------------
If i make a mistake, please e-mail 
me to: stealthfighter@another.com
--------------------------------------- encountered before, the <U>C</U>ontinue button will