CrackMe® Practices for Newbies ~ Moderated

Re: About Anti-Smartcheck routine...
Wednesday, 27-Jan-99 08:50:41
    195.207.101.104 writes:

    About a week ago, Princess posted a message on TheSandman's board,
    focusing on the "Anti-Smartcheck" feature of this crackme ; this is
    a slightly modified version of my answer on TS board (posted here
    on EB's request).
    ---

    Here and there the anonymous author left some funny message like
    "Shakin' up Smartcheck" or "BERSERK!!" so I was expecting
    some tricky routine. I first thought that it would use a kind of
    "time attack", since it somewhere makes a rtcDateDiff after two
    rtcGetTimeVar.

    But there's no trick ! It's just a silly loop which contains a lot
    of calls to VB functions, so that Smartcheck incredibly slow down
    execution by recording all the events. The counter of this loop is
    in ds:414026, and only one intermediate value and the final value are
    checked. So to use Smartcheck, you just have to shorten the loop, for
    instance by changing :

    at 412921: mov eax,258 into mov eax,04

    at 4131d8: cmp wptr[414026],1bc into cmp wptr[414026],03

    (You could also force a higher increment for the counter)

    Regards,

    Praktijk.

    Praktijk.


Message thread:

Solved it!!! (EB) (23-Jan-99 20:10:43)

Back to main board


Message subject:

Name: (optional)

Email address: (optional)

Type your message here:




Back to main board

Copyright © ProSoft 1997-1998
All rights reserved.