--------------------------------------
How to find a serial in LeapFTP
--------------------------------------

Cracker: stealthFIGHTER

Target: LeapFTP v2.6.2.470

Tools: Soft-Ice
		Brain

Where: http://www.leapware.com

Protection: The program is looking for "-" in the serial number.

----------------------------------------------------------------
Sorry for my english, its not my mother language.
----------------------------------------------------------------


-----------
Step 1:
-----------

===
Run program, go to <Help> and <Registration>. Type your name and as a s/n type 1234-5678 (the s/n must contain "-"). Go to Soft-Ice and type bpx hmemcpy (= Soft-Ice breaks, when is something copy to memory). Go back F5, and push OK ... Soft-Ice pops up. Twice press F5 (name, s/n) and F11 to get to caller. Now press 11x F12 key till you get to the program code and till you pass all RETs (= returns). You should be here:
===

... some stuff here ...
:00487EDA		CALL 00487FB0		; Call our real s/n 	
:00487EDF		TEST AL, AL			; Test our serials
:00487E		JZ 00487F45			; Bad boy	
... some stuff here ...

===
Trace into the CALL (F8 key). Trace and stop here:
===

:00487FCB		CALL 004040B8		; First part of fake s/n
:00487FD0		MOV EAX, [EBP-08]		
:00487FD3		CALL 004040B8		; Our name
:00487FD8		MOV EAX, [EBP+08]
:00487FDB		CALL 004040B8		; First part of real s/n

===
Stop at :00487BDB and type D EAX. At the data window you惻l see first part of your real serial number (it is 214065 - it is same for all s/ns).
Keep tracing (F10) till you come here:
===

:00488035		JNZ 00488009		; This jump will return you
:00488037		MOV EAX, [EBP+08]		
:0048803A		CALL 00408DE4		; 1st part of our real s/n

===
Once you pass all jumps, keep tracing till you come here:
===

:0048067		MOV EDX, [EBP-08]
:004806A		MOV EAX, 0048812C	; 2nd part of our real s/n

===
Once you at :004806A type D EDX and in data window you惻l get your fake s/n, name and 2nd part of our s/n. Clear all bpx, go back and try registration again. It is right? Yes, it is.
==========================
---------------------------------------------------------
If i make a mistake, please e-mail me 
to: stealthfighter@another.com
---------------------------------------------------------