Hack Forums
Decompiled VB6 code - need help with finding what it calculates - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Blackhat Training (https://hackforums.net/forumdisplay.php?fid=405)
+----- Forum: Reverse Engineering (https://hackforums.net/forumdisplay.php?fid=229)
+----- Thread: Decompiled VB6 code - need help with finding what it calculates (/showthread.php?tid=5901351)

Pages: Pages 1 2


RE: Decompiled VB6 code - need help with finding what it calculates - John Doe 5726 - Oct 30, 2018

(Oct 30, 2018 04:14 AM)Lost Doggy Wrote:  do 0-65535 until it works ; )

I considered on advising this but then realized it wouldnt be so easy to see if it worked, automatically, considering it has a GUI.


RE: Decompiled VB6 code - need help with finding what it calculates - Kufe - Oct 30, 2018

Well that is how I got to the correct numbers now, but it takes too long and I was hoping someone would be able to figure out from decompiled code how it's checked and I would be able to get that number easier. :)


RE: Decompiled VB6 code - need help with finding what it calculates - vercenta - Oct 30, 2018

lol then nop the function that retrieves the HWID and write the memory of a HWID you know returns 703


RE: Decompiled VB6 code - need help with finding what it calculates - Kufe - Oct 30, 2018

If I would only know how to do that. :) Max I came to is to decompile the code from app but can't manage to figure out how it checks the number.


RE: Decompiled VB6 code - need help with finding what it calculates - AbakBarama - Oct 30, 2018

Solved.

Code
char pszID[]="9A979599C66D9D9D996E9F9A20203356300";
int nIndex, nCheckSum=0;
for (nIndex=24; nIndex<strlen(pszID); nIndex++)  nCheckSum=nCheckSum+(pszID[nIndex]-'0')*nIndex;



RE: Decompiled VB6 code - need help with finding what it calculates - Kufe - Oct 30, 2018

Awesome, this is it. 🤗

Thanks alot AbakBarama, you saved me a lot of time. 😁