FireWorx Crackme5 ----------------- Tools Used: SoftIce --- Target URL: http://surf.to/FireWorx --- Protection: Code --- Start the Crackme, enter a code and set a breakpoint on hmemcpy and S-ICE will break direcly, then trace until you come here: :00441A0E 8B45FC MOV EAX,[EBP-04] :00441A11 50 PUSH EAX :00441A12 8D55F8 LEA EDX,[EBP-08] :00441A15 8B83C8020000 MOV EAX,[EBX+000002C8] :00441A1B E8A417FEFF CALL 004231C4 :00441A20 8B55F8 MOV EDX,[EBP-08] when you have runned the MOV EDX,[EBP-08] operation, do a 'D EDX' and you will see Regcode in the Data window, and guess what, that's the Regcode.. enter it and a nice little messagebox will pop up, saying that we have cracked it... --- /Klefz - http://klefz.cjb.net