Name : Start Clean Version : generic Editor : Firas Target : startcln.exe Tools : Softice Brain Cracker : LW2000 Tutorial : No.39 --- DISCLAIMER For educational purposes only! I hold no responsibility of the mis-used of this material! --- 1. Ok, load start clean and click on register. Then enter LW2000 as Username and 1230099 as code. Press ok. *BOOM* A Error Messagebox pops up. 2. Switch with [ctrl]+[d] to sice and set a breakpoint on the function Getdlgitemtexta. BPX GetDlgItemtext Press F5 to contine. Try it again. *BOOM* Sice pops up. With F11 we get the Caller. Ok, trace with F10 till esp is moved into eax. Ok, d eax shows our serial. 3. After a pair of F10s we see Lstrcmp and then Test EAX, EAX. When we take a look into the api help for LSTRCMP, we know that the two values must be saved before. value 1 value 2 compare So let's take a close look at the code. It saves eax (our s/n) and 00406030. Mhhm, 'd 406030' *g* Ok, let's try this code... Congratulation! You are a registered user. FINISH! Easy, or? cu LW2000 Any comments? Mail me LW2000@gmx.net !!! ---- tKC, thx for your tutors! I started with tutor 1 and i still read them... they are the best!