CrackMe® Practices for Newbies
CrackMe 2 by CyberBlade [ReFleXZ '99]

Re: Got something
Saturday, 17-Apr-99 17:58:34

    Hi EB,

    You are almost there, son't give up. If you reread my last answer to you, you should find that I said after the div is finished there are three more calls which start from the same place, the call ebx. You followed two of them and appearently missed the third. Make sure to follw the third one which will be another call to __vbaVarSub. If you place a bpx at the address one line below the call ebx, this will guarantee that you will stop her after you have observed what the sub routine is doing. Once you come to this last break just f10 untill you see a call __vbaLnStr or some thing like it. Now step into this call an soon you should come to the last important place, an fcmp. You won't miss it.

    Good Hunting,

    Joseph

    Joseph


Message thread:

A bit of contribution (Eternal Bliss) (14-Apr-99 13:15:53)

Back to main board