CrackMe® Practices for Newbies
VBCrackMe 6 by Eternal Bliss

Re: Re: Simplest road for this one...
Sunday, 14-Mar-99 19:07:34

    Actually, I noticed it more out of laziness than anything else. The code for the calculation and the compare were sitting right there in CheckClick in SmartCheck. I thought about figgering out the algorithm for it by causing the result of the calculation to equal 1 (a UID of @@@@@@A. The result is a small number (something to the e-6), which lead me to believe there is a bunch of division or subtraction going on. I hate figerring these out - my normal routine would be to patch the conditional jump. With VB6, though, I can never seem to get back to the source of the actual app -- all I ever get in sice is a series of convoluted visual basic calls. Yuck!

    I tried to find the compare to check the calculation against the UID and timers but there didn't seem to be any other code in the nameclick or serialclick event. Not being much of a vb fan, I wasn't sure where I could find that snippet of code - likely in the form for the window itself???

    Anyways, I looked a bit further and noticed some references to the registry regarding winhelp. I wasn't sure if this was a normal check for a VB6 app - to see if there was help associated with it or if it had something to do with the math involved in the rotating timers. Indeed, the increment in the timer seemed to change from one instance of the app to another which suggested the timers modified based on the last attempt to get into it? This looked like WAY too much of a headache to bother with and the zeroing out the UID seemed to work anyhow so there you go.

    I've been cracking software since the spiral tracking and custom DOS days of the Apple ][+. I'd only ever cracked one VB app before (hideous stuff to wade thru! Do you ever find references to the code itself (task vbcrackm) in sice? All my trace steps and F12's end up in VB code.

    Cheers,


    Zzzap!


    Zzzap!


Message thread:

Simplest road for this one... (Zzzap) (13-Mar-99 23:41:15)

Back to main board