Acid_Cool_178
presents he's
#25 Tutorial |
For Hellforge |
This Text Are Only Ment To Edcucational Purpose And Not To Be Used Illegaly, I Take No Response For Illegal Use Of This Text. Move On On Your Risc.
Athour Information |
acid_cool_178@hotmail.com | ||
Age | 17 | |
Web Page | http://acidcool.cjb.net/ | |
Date | Febuary 2K | |
Member in | Hellforge | Flying Horse Cracking Force |
Groups Web Page | Hellforge Login | FHCF Login |
Program Infromation |
Name | TCC Crackme 1 By Fr1c | CrackMe.exe | ||||
TCC Delphi Crackme #1 By Fr1c | DelCrk1.exe | |||||
Size | CrackMe.exe | 24KB Unzipped | ||||
DelCrk1.exe | ||||||
Athour | Fr1c | |||||
Where to Downlaod | http://campercrew.cjb.net | |||||
Tools used | SmartCheck | Downlaod At | ||||
1. Player Tools | ||||||
2. Programmer Tools | ||||||
What kind of a program | Crackme | Shareware | ||||
Skill | Easy | Not so easy | Hard | X-pert | ||
Information about the Protection I |
One serial in Visual basic and in delphi
Task 1 <-- TCC Crackme 1 By Fr1c
Task 2 <-- TCC Delphi Crackme #1 By Fr1c
Before We Start |
Smart Check must be well configured.
************ COPIED FROM ETERNAL BLISS ESSAY 2 (SMART CHECK USAGE"
************
SmartCheck One-Time Configuration:
Under Program Settings:-
Error Detection: "tick" all boxes except "Report errors immediately".
Advanced: "tick" first 4 boxes.
Make sure "Suppress system API and OLE calls" is not "ticked".
Reporting: All boxes "ticked" except for "Report MouseMove events from OCX
controls".
************ COPIED FROM ETERNAL BLISS ESSAY 2 (SMART CHECK USAGE" ************
The Process |
Task 1
Open CrackMe.exe in SC and run it by pressing F5.
Enter any dummy serial as you want and click on the register button.
Now when the mad messagebox come up then stop SC.
Find "+ _Click" and mark the line.
In "View-->Show all events".
Now you will be in a sea of SC Code.
Click on the "+" sign and now on the 9'th line donw you can see
"__vbaStrComp(String:"franjo",String:"Your
Serial")returns DWORD:FFFFFFFF"
BINGO!! franjo are the serial
Task 2
Open the crackme in W32Dasm and in "String Data References" can you see
"CONGRATULATIONS" dubbleclick on that string and scroll up until you can
see "password". And password are the serial :)
Greetings |
LaZaRuS, Wajid, Borna Janes, ManKind, Eddie Van Camper, ACiD BuRN, KoRnFLeX, Eternal_Bliss, Potsmoke, DiABLO. Torn@do, ^AlX^ and all the other i have forgotten