home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Reverse Code Engineering RCE CD +sandman 2000
/
ReverseCodeEngineeringRceCdsandman2000.iso
/
RCE
/
E_bliss
/
eb_tut23.txt
< prev
next >
Wrap
Text File
|
2000-05-25
|
3KB
|
98 lines
Tutorial Number 23
Written by Etenal Bliss
Email: Eternal_Bliss@hotmail.com
Website: http://crackmes.cjb.net
http://surf.to/crackmes
Date written: 3rd Jun 1999
Program Details:
Name: Crackme 1
Author: Leech
Language: Visual Basic 5
Tools Used:
SmartCheck
Cracking Method:
Code Sniffing
Viewing Method:
Use Notepad with Word Wrap switched on
Screen Area set to 800 X 600 pixels (Optional)
__________________________________________________________________________
About this protection system
This CrackMe is quite easy and is based on a fixed code for registration.
It uses the classical __vbaStrCmp. But I'll be using SmartCheck here
instead of Softice because I didn't load it when I decided to do some
cracking today.
_________________________________________________________________________
About this tutorial
Since this is my 23rd tutorial, I will presume that you have read the
previous ones. So, my description on how to use the tools will be reduced
unless there are new methods.
_________________________________________________________________________
SmartCheck
First, run the CrackMe with SmartCheck.
Click on the Register Button and fill in any name and code. Click OK.
You will be informed that the code is wrong. Ignore it for the time
being because soon, the code will be correct. 8)
I an using "12345" as the code.
You will see two "Command1_Click" reported in SmartCheck. Click on
the + sign next to the 2nd one to expand the thread.
You will see Text2.text.
** This is to get the input from the 2nd textbox. (your code)
Highlight the line by clicking on it. Then choose "Show All Events" in
SmartCheck.
One line under Text2.text, you will see this:
__vbaStrCmp(String:"cbthceel",String"12345")returns DWORD:FFFFFFFF
Didn't I tell you at the start the the CrackMe uses __vbaStrCmp?
Well, if "12345" is the code you entered, and it is compared with
something, what do you think "cbthceel" will be? lol
CrackMe cracked!!
__________________________________________________________________________
Additional Stuff
If you were to use SoftIce, set the bp using "bpx __vbaStrCmp". You will
be sure to break at the bp when you click on the OK button. Trace into the
CALLS and you will see your correct serial soon.
__________________________________________________________________________
Final Notes
This tutorial is dedicated to all the newbies like me.
And because I'm a newbie myself, I may have explained certain things wrongly
So, if that is the case, please forgive me. Email me if there is anything
you are not clear about.
My thanks and gratitude goes to:-
All the writers of Cracks tutorials and CrackMes
and also to all the crackers that have been supporting my site and project forum.