Results 1 to 4 of 4

Thread: A Software Program ;)

  1. #1

    A Software Program ;)

    I'm having trouble getting this one (or any one!). I've set breakpoints on "vbastrcomp", learning the ropes of OllyDbg. There's suppossed to be a comparision of the two strings and the password laid out nicely about this call. There's not. Eeerm. Let's type what I have. This is above the call :

    00726345 . FF15 28144000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove

    What's this mean? Is the serial somewhere inside? and this before hand :

    00726311 . FF15 D0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Please avoid capslocked thread title if you don't want to glow the FAQ in the dark..

    You say your program supposedly compare the good serial and the one you entered with "vbaStrCmp".
    But it only happens in really weak software and beginner crackmes..
    Last edited by Silkut; March 5th, 2008 at 02:11. Reason: typo
    Please consider donating to help staying online (here is why).
    Any amount greatly appreciated. Thank you.

  3. #3
    I know you say that you're learning the ropes of OllyDbg, but VB apps *generally* are not a good starting point for doing this. You should read some tutorials on VB apps. (Not to mention the forum rules..)

    As for the: "What's this mean?" it is an API call for a VB function. If you punch it in (Your favourite search engine), you will be able to find all the definitions/structures of them.

    Also, if you KNOW that it's a direct comparison and KNOW it is using the vbastrcomp function, then you can set a bp on every call and then click the "register" button or whatever. Olly will break on the call that you need, and if it's a direct compare, you're just a stack location or register away from the correct serial. If it 'generates' a code, you're just a 90 or an EB away from success.

    Last edited by personmans; March 4th, 2008 at 13:13.

  4. #4
    Microsoft Debugger is *quite* good for VB Apps. And its free, btw.

    Have Phun
    Blame Microsoft, get l337 !!

Similar Threads

  1. Win CE Program Cracked... Or not???
    By voidunknown in forum The Newbie Forum
    Replies: 3
    Last Post: June 18th, 2005, 13:50
  2. Strange Reaction In Program
    By ecks in forum The Newbie Forum
    Replies: 4
    Last Post: April 2nd, 2005, 03:31
  3. 16 bit Program
    By TuttoSommato in forum OllyDbg Support Forums
    Replies: 5
    Last Post: November 9th, 2004, 06:44
  4. HaspServicesSpy Program Release !!! :)
    By hack3r2k in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: June 20th, 2002, 05:30
  5. Hard Keygennin Program
    By r00t in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: May 20th, 2002, 21:02


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts