-=Cracking sortof´s Crackme v0.1=- by: tarq -=Tools needed=- We will only have to use softice in this one. -=Protection=- A serial# is generated by the username, there is also a anti-smartcheck protection, but we dont have to remove that, since we dont need to use sc. You can try loading it into softice, u actually have time to input a name and regnumber and click register before the program shuts down. But lets se what we can do using only softice. -=Lets Begin!=- Ok, fireupp the crackme, input a name and a serial, my will be: tarq and 123456. What should we break on ? Well, in vb, there are two funktions that offen are used to compare two strings, __vbastrcomp and __vbastrcmp. So we can try using them. In softice do: :bpx __vbastrcomp :bpx __vbastrcmp Now, enter name and serial again and press register. We break into softice. It breaked on __vbastrcomp :) Now what ? Well, to display the two strings beeing compared we type: :d esp l 1 This will give us: 015F:0064F08C 0F00461B 00000000 00422580 004227AC -------- -------- The strings being compared is: this and this Those adresses might not be the same for you! So lets se what they hold: :d 00422580 Hrm..1.1.8.1.0.0.1.1.8.1.1.8, since its vb its wide char, so it really is: 118100118118 The otherone: :d 004227AC Hey :) 1.2.3.4.5.6 So, 118100118118 is compared with 123456 = our serial. So try using 118100118118. Well i´ll be damned. Nice Job! Next step would be to make a keygen for this. Thanks to E_Bliss for a great site for all us newbies If you have any question or anything, mail to: ingetalls@hotmail.com