This tutorial are coming from

Acid Cool 178

Tutorial Number 58

Target

Program_____________ fuzzyCaT cRACKmE~1

Protection___________ Name - Serial
Downlaod it at ______ crackmes.cjb.net / fuzzyCaT.TSX.ORG
Date________________ 20 June 2000

Toolz

Smart Check
Hex Editor
Proc Dump


Essay

Well, another VB Crackme are donefor now... why, i have been in one huge idle period for tCA, Hellforge and have mainly worked for Fx5, one new NORWEGIAN underground crew... We will kick ass on NO ;)

Now, i'm are one crackmes.cjb.net surfer, are on that page every day, many times, don't know why but i' just are there.. hehe,, well, so i downloaded some crackmes yesterday and today i'm are working on them, and testing new stuff like DeDe at Fr1c's Crackme 7, try it, it are worh a try..

Now, it now that this crackme are on VB crackme
CrkMe[Native]
CrkMe[P-CODE]
Duh, i'm are not braindead yet, only 17 years and not a alcohol drinker, training man :)

Fire up the Crackme in Smart Check and i used these info.
Name: Acid_Cool_178
Serial: 2951

And check it, well, nothing to debugg, watafuck are this,, open the exe on one hex editor and you will se the word UPX there... Well this crackme needs to be unpacked in UPX, do it in ProcDump..

Time to go on, and now when you will debug the code, i guess that u have entred the file and when the error box came up, just close the program in amsrt check, and click on 2_Mouseup", view-->Show All Events and we are ready to rock...

Asc(String:"X") Returns Intenger:XXX This command are taking one char on your name and converting it to a number...
__vbaVarAdd(Intenger:XXX, Intenger:XXX) Here are your number added to another number..
__vbaVarForNext This are one Loop commend

Now, by loking at these commands so are this crackme taking the name and converting each char to their ASCII number and adding it to another number..

it are adding like this

D 100
I 105
C 99
A 65

This will be

D + I = X

X + C = X2

X2 + A = X Final

for it will be

100 + 105 = 205
205 + 99 = 304
304 + 65 = 369
X Final = 369

Now, what are next, trace down and you will see this..

__vbaVarMul(Variant:Intenger:369, Variant:Long:47236) 369 * 47236 17430084
__vbaVarMul(Variant:Long:4, Variant:Double:3,14) 4 * 3,14 12,56
__vbaVarDivl(Variant:Double:12,56, Variant:Intenger:6) 12,56 / 6 2,09

Now, i didn't understand a shit of this, i need help here...

Where did "4" came from, my name Acid = 4 charters... and where did 6 came from, or are it there every times, now i changed my Name to Acid_Cool_178 and password for Hellforge..

 

HAha, it did take the first __vbaVarMul from ny name Acid_Cool_178 = 13 charters and multiblying it with 3,14..
13 * 3,14 = 40,82

And next are
40,82 / 6 = 6,803 -->3's

Now, that are done.. And what the hell are now, the __vba_StrCmp are comparing 7530768 with Hellforge and that are the serial just to now.. But there the hell fif that number came from ?? well, i did not find that out but the rest are explained the are crackme are cracked....

 

Ending

I need time now DAMET!!!!


LaZaRuS, Wajid, Borna Janes, ManKind, Eddie Van Camper, ACiD BuRN, KoRnFLeX, Eternal_Bliss, Potsmoke, DiABLO. Torn@do, ^AlX^ , AC|D, Dark Wolf, Marton and all the other i have forgotten