downloadbrowseEvOlUtIoN's sun_crackme

Download crackme_sun.zip, 14 kb (password: crackmes.de)
Browse contents of crackme_sun.zip

This is my second crackme.
I think is simple, but maybe not...

The goal is:
- Find the correct way to enable the check button
- Write a keygen for it, or simply find a correct serial for your name

Rules:
- Patching is allowed only to enable button

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: (Visual) Basic

Published: 28. Sep, 2006
Downloads: 557

Rating

Waiting for at least 3 votes
(we have only 2).

Rate this crackme:

Send a message to EvOlUtIoN »

View profile of EvOlUtIoN »

Solutions

There are no solutions to this crackme yet. Have you solved it? Please write a tutorial and submit it here!

Submit your solution »

Discussion and comments

sd333221
28. Sep 2006
I already enabled the button, but it seems like there is no comparision with the right serial :D
Some crap algo i don't like because of visual basic...
Let's see
EvOlUtIoN
Author
28. Sep 2006
Yes, there isn't a direct comparison with the correct serial, but it is equally simple.
zhengjuyu
04. Oct 2006
I'm a newbie, I have no idea for patching vb button( i only can enable it at runtime ), could you give me some hints, thanks!
EvOlUtIoN
Author
04. Oct 2006
i suggest you to look on other controls in order to enable the button, not only to the button, but other things...
mucki
05. Oct 2006
I used VB-Reformer to enable the button. I set the Check button enabled and the time of the timer to 9999. Then I patched the file at offset 9EC00 to E97BEAFFFF90 (a jump to the real algo, maybe I'm wrong), but now I don't want to go on because the algo is so long...
froidiño
22. Feb 2007
Hello EvOlUtIoN
Maybe be wrong, but after analyzing it often, I believe that no solution exists.
Can you confirm it?
Predator
23. Jun 2007
Enable the button is very very easy, the difficulty is in the keygen it. because vb make a lot of confusion in the code.
Predator
23. Jun 2007
mucki, why not set timer to 0? ;-)
soychino
24. Dec 2007
sum(username)*&h56 xor BC614E=sum(serial)*&h56 xor cf33ee is this correct? but i dont think there is a solution for the equation
narf
24. Dec 2007
soychine, a bit of elementary math yields:
sum(serial) = ((sum(username)*0x56) xor 0xbc614e xor 0xcf33ee)) / 0x56
how's that for a solution? ;)
just wiggle the serial a little until it fits.
soychino
26. Dec 2007
sum(serial) = ((sum(username)*0x56) xor 0xbc614e xor 0xcf33ee)) / 0x56
still i don't think there is logically a solution to the equation,can someone help me out?Thx!
deurus
16. Dec 2010
With Vb Reformer enable the button and put the timer to 0.
Ok but we have anything to do because there is an even
"mousedown" that disable the button.

To activate the button first we need to locate the code, there are
any ways but the fastest is get the offset with "SmartCheck".
SmartCheck says that the mousedown offset is 49EC00. Analyzing the
code we view this:

Original:
;Push 0 in the pile; 0 = 00 = FALSE
0049EC99 6A FF PUSH 0
0049EC9B . 56 PUSH ESI
0049EC9C . 8B0E MOV ECX,DWORD PTR DS:[ESI]
;[...+8C] refers to the button
0049EC9E . FF91 8C000000 CALL DWORD PTR DS:[ECX+8C]

Button cheat:
;Making this change we hoax the button; -1 = FF = TRUE
0049EC99 6A FF PUSH -1
0049EC9B . 56 PUSH ESI
0049EC9C . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0049EC9E . FF91 8C000000 CALL DWORD PTR DS:[ECX+8C]

Then only need keygen it.
deurus
22. Mar 2012
Evolution please help us with the algo
deurus
22. Mar 2012
Evolutio please put an example of name/serial

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.