![]() | |
Re: About Anti-Smartcheck routine... Wednesday, 27-Jan-99 08:50:41
About a week ago, Princess posted a message on TheSandman's board, focusing on the "Anti-Smartcheck" feature of this crackme ; this is a slightly modified version of my answer on TS board (posted here on EB's request). --- Here and there the anonymous author left some funny message like "Shakin' up Smartcheck" or "BERSERK!!" so I was expecting some tricky routine. I first thought that it would use a kind of "time attack", since it somewhere makes a rtcDateDiff after two rtcGetTimeVar. But there's no trick ! It's just a silly loop which contains a lot of calls to VB functions, so that Smartcheck incredibly slow down execution by recording all the events. The counter of this loop is in ds:414026, and only one intermediate value and the final value are checked. So to use Smartcheck, you just have to shorten the loop, for instance by changing : at 412921: mov eax,258 into mov eax,04 at 4131d8: cmp wptr[414026],1bc into cmp wptr[414026],03 (You could also force a higher increment for the counter) Regards, Praktijk. Praktijk. |
Solved it!!! (EB) (23-Jan-99 20:10:43) |
|
Copyright © ProSoft 1997-1998
All rights reserved.