Name      : Browserola

Version   : 1.0

Editor    : Coda

Target    : browsola.exe

s/n saved : HKEY_CURRENT_USER\Software\Codo\Browserola\UserInfo

Tools     : Softice
            Brain
            
Cracker   : LW2000

Tutorial  : No.45

http://www.codo.com/browserola/



---
DISCLAIMER
For educational purposes only!
I hold no responsibility of the mis-used of this material!
---


1.      Click the Browserola logo from the main screen.
        This will bring up the 'About...' box.
        Click the 'Register' button. Then enter the following details:
        User Name: LW2000
        Reg Number: 1230099
        Click on Register. *BOOM* 'The Code does not match.'

2.      Switch to Sice and set a bpx on hmemcpy. 
        'bpx hmemcpy'
        Press F5 to return to the app and click on register.
        *BOOM* Sice pops up. Now count how often sice breaks on hmemcpy.
        Ok, you count 4 times. Now let sice break again on hmemcpy and
        press F5 until you count this 4 breaks (3x F5).
        Then press 12x F12 to go to the relevant code.

3.      Trace with F10 until you reach this piece of code:

0177:00456CA2 E88DEFFFFF      call 00455C34 <-- calculate code routine
0177:00456CA7 8B45F0          mov eax, dword ptr [ebp-10] real code
0177:00456CAA 8B55F8          mov edx, dword ptr [ebp-08] fake code
0177:00456CAD E856CBFAFF      call 00403808   <-- check routine
0177:00456CB2 752A            jne 00456CDE    <-- check

        Trace till you are on 00456CAD. Mhmm, 'd edx' will show us our
        fake code (1230099) and 'd eax' will show the correct reg number
        (CBW95-R03309-0000517). Should i say more? ;)

        With this knowledge try to register Brwoserola, but first
        type 'bc hmemcpy' to clear the  breakpoint.


Congratulation! You are a registered user.

FINISH! Easy, or?

cu LW2000
Any comments? Mail me LW2000@gmx.net or go to http://www.LW2000.cjb.net
----
tKC, thx for your tutors!
I started with tutor 1 and i still read them... they are the best!