Name:Byte Catcher 1.01 d Where:http://www.save-it.com Type of protection:serial number Description:This is a neat little program that allows you to resume a download off of an ftp, even after disconnection, by just hitting the "Go" button. Some disadvantages are that it doesn't have a retry feature incase the server is full and you can't change the port number. Tools you will need to crack this program: Soft-ice 3.0 or better (http://www.numega.com) A piece of paper to write the correct serial # down How to crack this program: Step 1.)Load Byte Catcher 1.01 and select "About" from the "Help" menu. Step 2.)Click on register and fill out the information it asks for. I used this: 66696669 Manson69 mExElitE/c4n '97 DO NOT HIT ENTER YET!!! Step 4.)Press ctrl-D to enter Soft-ice and set a break point on hmemcpy by typing "bpx hmemcpy" (without quotation marks.) Step 5.)Leave Soft-ice by hitting ctrl-D or F5. Then hit "Ok." Step 6.)You will be back in Soft-ice now. Hit ctrl-D or F5 two more times to allow Byte Catcher to read all the information you entered in the boxes. Step 7.)Now hit F12 until you get out of the 16-bit protected code and into the 32-bit code. XXXX:XXXX <----4 digits followed by a colon and 4 more digits indicates that you are in 16-bit protected mode XXXX:XXXXXXXX <----4 digits followed by a colon and 8 more digits indicates that you are in 32-bit code. Step 8.)Now lets scan for the serial number that we entered. We do this by typing "s 0 l ffffffff 'your code here'" (without the quotation marks but WITH the ' ' marks.) My serial number was 66696669 so I entered: s 0 l ffffffff '66696669' It will then find you your code at a given address. My serial number was found at the address 013F:00A22FAC. Lets now set a break point on this memory location by typing: bpm 013F:00A22FAC <----Your memory address will probably be different Step 9.)Hit ctrl-D or F5 to leave Soft-ice and low and behold you are right back in Soft-ice! You will end up in code similar to this: 0137:00418936 8A02 MOV AL,[EDX] <--This moves what is in memory at EDX to AL 0137:00418938 3A06 CMP AL,[ESI] DS:0047B14C=37 <--This compares what is in memory at AL and ESI 0137:0041893A 751E JNZ 0041895A <--Acts as a result of the compare. This is the code that we need to be concerned with. The brackets around EDX and ESI indicate that you are dealing with thier what is in their memory location not their values. If you do a d edx and view the what is in memory on EDX you will see the code you entered. If you do a d esi you will see the correct code. Note down the correct code,type "bc *" (without quotation marks) to clear all break points. Then enter the correct serial number in place of the one you entered and hit "Ok" and it will register! Final Notes: If you try don't enter the correct serial number, but change the registration name and company and follow these steps over you will see that the registration code doesn't change. This program has one universal registration code. Which mean that you can enter the same serial number with any name and/or company and it will register! Due to this fact a key maker/ generator or crack/patch is not needed. Hope that this tutorial worked for you! Acknowledgments: I would like to say thanks to all the members and regular visitors of the mExElitE/c4n '97 group and channel. This tutorial was written by: Manson69 of mExElitE/c4n '97 I can be found on IRC (Efnet) everyday in: #cracking4newbies the mExElitE/c4n '97 official channel.