------------------------------------------------------------------------- How to find a serial for Applet Marquee Wizard ------------------------------------------------------------------------- Cracker: stealthFIGHTER Target: Applet Marquee Wizard v3.5 Tools: SoftIce Brain Where: n/a Sorry for my english, its not my mother language. ----------- Step 1: ----------- Run progg - HELP - REGISTRATION Info., enter any s/n. Go to Soft-Ice set breakpoint on memory copy (bpx hmemcpy) go back and press "Register". !Yes! We are in SI. Press twice "F5" key, "F11" to a caller then press "F12" to get to the 32-bit code and go through all RETs (about 11 times). You should be here: 015F: 0048ABD1 CALL 00431736 015F: 0048ABD6 MOV EAX, [EBP-04] 015F: 0048ABD9 CALL 00403F70 <-- d eax = our false s/n 015F: 0048ABDE MOV EDX, 0048ACCC 015F: 0048ABE3 CALL 00408DB1 <-- d edx = real s/n 015F: 0048ABE8 TEST EAX, EAX 015F: 0048ABEA JNZ 0048AC9E On this line 015F: 0048ABE3 (CALL 00408DB1) type "d edx" and in the data window youŽll see this: ..p97z................23ws3.......... ....................true.................... .......thank.....for......purchasin g.........complete..................... Write this numbers (name="p97z" password="23ws3") and enter again. --------------------------------------- If i make a mistake, please e-mail me to: stealthfighter@another.com ---------------------------------------P>