---------------------------------------------------
How to find a serial in Unreal Screensaver
---------------------------------------------------

Cracker: stealthFIGHTER

Target: Unreal Screensaver v1.1

Tools: Soft-Ice
		Brain

Where: http://www.SliceOfLife.com/Official/alis/alissw.htm

----------------------------------------------------------------
Sorry for my english, its not my mother language.
----------------------------------------------------------------


-----------
Step 1:
-----------

===
Install screensaver.
Go to display properites -> Screensaver -> Settings -> About -> Registration -> fill the fields -> push OK ... The registration code is invalid :[
===
Go to Soft-Ice and type bpx hmemcpy (= Soft-Ice breaks, when was something copied to memory) and go back to screensaver. Now push OK again ... Soft-Ice pop-ups.
===
Soft-Ice breaks 2 times (1. Our name was copied to memory, 2. Our serial number was copied to memory). So press F5 key to skip our name. Now press F11 to get to the caller. Now keep pressing F12 key, till we get to the program code.
===
Now you are here:
===


:0040CBF6		CALL EBX
:0040CBF8		LEA EAX, [ESP+0C]			<-- You stop here
:0040CBFC		PUSH EAX	
:0040CBFD		PUSH 0041A380
:0040CB02		PUSH 0041CF9C
:0040CB07		CALL 0040CEA0
:0040CB0C		ADD ESP, 0C
:0040CB0F		TEST EAX, EAX
:0040CB11		JZ 0040CC31
:0040CB13		MOV EAX, [0041AD30]
:0040CB18		ADD EAX
:0040CB1E		CMP EAX, [ESP+0C]			<-- Comparison of our serials
:0040CB22		JNZ 0040CC31			<--- Bad boy!

===
Stop at a comparison of a serials. At this time you´ll see at right top corner some like this:

SS:0065EFAC=YOURFAKESERIALNUMBER

And if you look at the left top corner you should see this:

EAX=CD328377

What is it? Yes - you are right - our s/n. Note it, clear all breakpoints and go back. Type it --> This copy of Unreal screensaver is registered to ... ... ...
---------------------------------------------------------
If i make a mistake, please e-mail me 
to: stealthfighter@another.com
---------------------------------------------------------