home *** CD-ROM | disk | FTP | other *** search
- Tutorial Number 23
-
- Written by Etenal Bliss
- Email: Eternal_Bliss@hotmail.com
- Website: http://crackmes.cjb.net
- http://surf.to/crackmes
- Date written: 3rd Jun 1999
-
- Program Details:
- Name: Crackme 1
- Author: Leech
- Language: Visual Basic 5
-
- Tools Used:
- SmartCheck
-
- Cracking Method:
- Code Sniffing
-
- Viewing Method:
- Use Notepad with Word Wrap switched on
- Screen Area set to 800 X 600 pixels (Optional)
-
- __________________________________________________________________________
-
-
- About this protection system
-
- This CrackMe is quite easy and is based on a fixed code for registration.
- It uses the classical __vbaStrCmp. But I'll be using SmartCheck here
- instead of Softice because I didn't load it when I decided to do some
- cracking today.
-
- _________________________________________________________________________
-
-
- About this tutorial
-
- Since this is my 23rd tutorial, I will presume that you have read the
- previous ones. So, my description on how to use the tools will be reduced
- unless there are new methods.
-
- _________________________________________________________________________
-
-
- SmartCheck
-
- First, run the CrackMe with SmartCheck.
-
- Click on the Register Button and fill in any name and code. Click OK.
- You will be informed that the code is wrong. Ignore it for the time
- being because soon, the code will be correct. 8)
- I an using "12345" as the code.
-
- You will see two "Command1_Click" reported in SmartCheck. Click on
- the + sign next to the 2nd one to expand the thread.
-
- You will see Text2.text.
- ** This is to get the input from the 2nd textbox. (your code)
-
- Highlight the line by clicking on it. Then choose "Show All Events" in
- SmartCheck.
-
- One line under Text2.text, you will see this:
- __vbaStrCmp(String:"cbthceel",String"12345")returns DWORD:FFFFFFFF
-
-
- Didn't I tell you at the start the the CrackMe uses __vbaStrCmp?
- Well, if "12345" is the code you entered, and it is compared with
- something, what do you think "cbthceel" will be? lol
-
- CrackMe cracked!!
-
- __________________________________________________________________________
-
-
- Additional Stuff
-
- If you were to use SoftIce, set the bp using "bpx __vbaStrCmp". You will
- be sure to break at the bp when you click on the OK button. Trace into the
- CALLS and you will see your correct serial soon.
-
- __________________________________________________________________________
-
-
- Final Notes
-
- This tutorial is dedicated to all the newbies like me.
-
- And because I'm a newbie myself, I may have explained certain things wrongly
- So, if that is the case, please forgive me. Email me if there is anything
- you are not clear about.
-
-
- My thanks and gratitude goes to:-
-
- All the writers of Cracks tutorials and CrackMes
- and also to all the crackers that have been supporting my site and project forum.