Cracking for Newbies  - by Dahood
                

Target: Smart Explorer 6

Tools used: Softice 

Protection:
1.Serial


NOTE: This tutorial is not totally for newbies so i excpect that u know
1.how to use Softice
2.Assembly

ok let start
open the program and check the protection 
Help --->Enter Registration...
now enter ur name for the name and for the serial u have 5 slots and in
each slot u can put only 5 Dig or Letters ( we dont know ..Yet:)

so 11111  22222  33333  44444 55555

ctrl d ---->to get in to softice
bpx hmemcpy --->breakpoint on an api ...
ctrl d ----> to get out of softice and go back to where we were.

now click ok and u should land in softice

d cx ---> u see 11111 hit f5
d cx----> u see 22222 hit f5 
d cx----> u see 33333 hit f5 
d cx----> u see 44444 hit f5 
d cx----> u see 55555 hit f5
so far we know that its comparing each one of them 
d cx----> u see the name u entered hit f5 ****
d cx----> u see 11111 hit f5
d cx----> u see 22222 hit f5 
d cx----> u see 33333 hit f5 
u get out and it tells u invalid password

so it compares each of them separte and then when it reaches the
name  it must compare the real serial

k do everything all over untill u get to the hit OK part

so now u should break in softice and when u dump cx 
d cx u should see 11111 .... u here ...ok good
hit f5 4 times now d cx u should see the name u used ok good
 f 11 to get out
and f 10 to trace line by line u should keep hitting f 10 till u see
a 32 bit and it should say explorer code or something in the middle 
then  u should see a serious of ret
go through them all and u should land here...

004b5a58            mov eax,[ebp-28] --->d eax u should see the name u used
hit f 10 couple of time until ur on this line
004b5a63            mov eax,[ebp-24] ---> d eax u should see the real Serial
004b5a66            mov edx,[ebp-08] ---> d edx u should see 11111 22222 33333 etc
004b5a69            call 004040dc ------>  when u get here d edx and write the number down

and that s it 

i used 
Name:Dahood
S/N:Q2MKT-9F8EJ-VNLEC-ESSLR-RN5FN

i hope i didnt confuse u and if u have any question, comments
my icq# is 69518421 or u can e mail me at webcrawler28@hotmail.com

i would like to say thanks to all the crackers 2 many 2 list , for helpin me also for there 
tutorials
also a big thanks to krobar's site: http://zor.org/krobar/
 
				Cracking for Newbies  - by Dahood