--------------------------------------------------------------- How to find a serial in Import Wizard Pro -------------------------------------------------------------- Cracker: stealthFIGHTER Target: Import Wizard Pro v5.0.3 (VB) Tools: SoftIce Brain Where: http://www.beside.com Sorry for my english, its not my mother language. ----------- Step 1: ----------- === Run Import Wizard, go to registration window, fill the boxes (I entered: iNFiNiTY 2000 as name, World Wide Web as a company and 9876543210 as s/n), press Register button -> B00M -> "Please check that name, company......" === This is VISUAL BASIC program so we use this breakpoint: BPX MSVBVM50!___vbaStrComp. So go to Soft-Ice and set this breakpoint, go back and press Reg. button again. === We are in Soft-Ice. Now press (about 48 times) "F5" key and "F11" key to get to the CALLer. You will land on the RET (= return of the function), so press one times "F12" key to pass the RET. You should be here: === 015F:0F0FEBBF E8D0180000 CALL 0F100494 015F:0F0FEBC4 66C7070100 MOV WORD PTR <--- we land here 015F:0F0FEBC9 3C02 CMP AL, 02 015F:0F0FEBCB 740B JZ 0F0FEBD8 015F:0F0FEBCD 8B0483 MOV EAX, [EAX*4+EBX] 015F:0F0FEBD0 894708 [EDI+08], EAX 015F:0F0FEBD3 66C7070B00 MOV WORD PTR [EDI], 000B 015F:0F0FEBD8 57 PUSH EDI 015F:0F0FEBD9 33C0 XOR EAX, EAX 015F:0F0FEBDB 8A4602 MOV AL, [ESI+02] 015F:0F0FEBDE 83C603 ADD ESI, 03 015F:0F0FEBE1 FF248594ED0F0F JMP [EAX*4+0F0FED94] 015F:0F0FEBE8 6A00 PUSH 00 015F:0F0FEBEA BB60ED0F0F MOV EBX, 0F0FED60 015F:0F0FEBEF EBC9 JMP 0F0FEBBA 015F:0F0FEBF1 6A00 PUSH 00 === Now press "F10" (some times) key till you get here: === 015F:0F0FD676 E882DDF1FF CALL MSVBVM50!__vbaBoolVar 015F:0F0FD67B 50 PUSH EAX <--- REAL CODE 015F:0F0FD67C 33C0 XOR EAX, EAX === On the line 015F:0F0FD67B (PUSH EAX) type: D ECX and in the data window you get your real code but in the W.I.D.E.C.H.A.R. === I get: === 7.0.5.0.0.3.7.6 0.8.7.6............ a.n.d.....s.o.m.e b.u.l.l.s.h.i.t....... ........................ === Write this number down and enter again. Yes.... === === Note: === You got a site license now. If you would like to get a single license do all again and the data adress on 015F:0F0FD67B (PUSH EAX) will change. (I get 895273025469). === --------------------------------------------------------- If i make a mistake, please e-mail me to: stealthfighter@another.com ---------------------------------------------------------