Tutorial Number 23

Written by Etenal Bliss
Email: Eternal_Bliss@hotmail.com
Website: http://crackmes.cjb.net
         http://surf.to/crackmes
Date written: 3rd Jun 1999

Program Details:
Name: Crackme 1
Author: Leech
Language: Visual Basic 5

Tools Used:
SmartCheck

Cracking Method:
Code Sniffing

Viewing Method:
Use Notepad with Word Wrap switched on
Screen Area set to 800 X 600 pixels (Optional)

__________________________________________________________________________


                        About this protection system

This CrackMe is quite easy and is based on a fixed code for registration.
It uses the classical __vbaStrCmp. But I'll be using SmartCheck here 
instead of Softice because I didn't load it when I decided to do some 
cracking today.

_________________________________________________________________________


                        About this tutorial

Since this is my 23rd tutorial, I will presume that you have read the 
previous ones. So, my description on how to use the tools will be reduced
unless there are new methods.

_________________________________________________________________________


				SmartCheck

First, run the CrackMe with SmartCheck.

Click on the Register Button and fill in any name and code. Click OK.
You will be informed that the code is wrong. Ignore it for the time
being because soon, the code will be correct. 8)
I an using "12345" as the code.

You will see two "Command1_Click" reported in SmartCheck. Click on
the + sign next to the 2nd one to expand the thread. 

You will see Text2.text.
** This is to get the input from the 2nd textbox. (your code)

Highlight the line by clicking on it. Then choose "Show All Events" in
SmartCheck.

One line under Text2.text, you will see this:
__vbaStrCmp(String:"cbthceel",String"12345")returns DWORD:FFFFFFFF


Didn't I tell you at the start the the CrackMe uses __vbaStrCmp?
Well, if "12345" is the code you entered, and it is compared with 
something, what do you think "cbthceel" will be? lol

CrackMe cracked!!

__________________________________________________________________________


                             Additional Stuff

If you were to use SoftIce, set the bp using "bpx __vbaStrCmp". You will
be sure to break at the bp when you click on the OK button. Trace into the
CALLS and you will see your correct serial soon.

__________________________________________________________________________


                             Final Notes

This tutorial is dedicated to all the newbies like me.

And because I'm a newbie myself, I may have explained certain things wrongly
So, if that is the case, please forgive me. Email me if there is anything 
you are not clear about.


My thanks and gratitude goes to:-

All the writers of Cracks tutorials and CrackMes
and also to all the crackers that have been supporting my site and project forum.