                      ͻ
                        Tutorial for magenta crackme #4 
                      ͼ



Ŀ
1.Intro 


The last crackme from this package.

magenta says that "There should be more than only one 'good' key, but i found only one till yet"
hum... too lazy to write a bruteforcer magenta ? ;)



Ŀ
2. Let's go 


Open the crackme with Smartcheck, etc...

Enter '12345678' as your serial and click on 'OK'

No _vbastrcmp(entered_serial,correct_serial) this time, so 'view -> Show All Events',click on 
'[+] Command1_Click' to expand it and let's see what we got :

<-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><->
[...]
_vbaVarMul(VARIANT:String:"1",VARIANT:String:"2")	-> temp1 = 1 * 2 = 2
_vbaVarAdd(VARIANT:String:"3",VARIANT:String:"4")	-> temp2 = 3 + 4 = 7
_vbaVarSub(VARIANT:Double:2,VARIANT:String"34")		-> temp3 = 2 - 34 = -32
_vbaVarMul(VARIANT:String:"5",VARIANT:String:"6")	-> temp4 = 5 * 6 = 30
_vbaVarAdd(VARIANT:Double:-32,VARIANT:Double:30)	-> temp5 = temp3 + temp4 = -2
_vbaVarAdd(VARIANT:Double:-2,VARIANT:String"7")		-> temp6 = temp5 + 7 = 5
_vbaVarSub(VARIANT:Double:5,VARIANT:String"8")		-> temp7 = temp6 - 8 = -3
_vbaVarMove(...)
SysFreeString(...)
_vbaVarTstEq(VARIANT:Double:-3,VARIANT:Const Integer 10) -> registered if temp7 = 10
<-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><-><->

Just some stuff with the digits of our serial and a final check



Ŀ
3. The bruteforcer


We can try all the numbers between 10000000 and 99999999 to find those who verify the equations
I've wrote above

Look at the keygen for more details.


    ________     _______     _______
   /__   __/\   /  ____/\   /  ____/\
   \_/  /\_\/  /  /\___\/  /  /\___\/
    /  / /    /  /_/_     /  / / 
   /  / /    /____  /\   /  / /
  /  / /     \___/ / /  /  / /
 /  / /     ____/ / /  /  /_/_
/  / /     /_____/ /  /______/\
\__\/      \_____\/   \______\/ 25/07/2000

www.tscube.cjb.net


I wonder if someone will one day read these lines... if it's the case, drop me a mail, you'll 
make me happy ;)

