| View previous topic :: View next topic | 
	
	
		| Author | Message | 
	
		| slippppppppp Grandmaster Cheater
 
  Reputation: 0 
 Joined: 08 Aug 2006
 Posts: 929
 
 
 | 
			
				|  Posted: Mon Sep 03, 2007 9:09 pm    Post subject: My first C++ crackme |   |  
				| 
 |  
				| You wont believe how incredibly easy this is. its a 1/10 challenge. 
 Rules, no patching, just find the password. TY
   |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| Zand Master Cheater
 
 ![]() Reputation: 0 
 Joined: 21 Jul 2006
 Posts: 424
 
 
 | 
			
				|  Posted: Mon Sep 03, 2007 11:19 pm    Post subject: |   |  
				| 
 |  
				| 1 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| Symbol I'm a spammer
 
 ![]() Reputation: 0 
 Joined: 18 Apr 2007
 Posts: 5094
 Location: Israel.
 
 | 
			
				|  Posted: Tue Sep 04, 2007 6:54 am    Post subject: |   |  
				| 
 |  
				| nice good idea for putting the password after the "Congrats" and then if its not the password jump the incorrect password
  it took me a while to understand that becuase 1 O_O lol 1..? i could have cracked it without olly :O if it was like 11 i wouldnt think about that lol   C++ crackme's are hard
   ...well, they are hard for me
   1333 post, soon 1337
     |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| haha01haha01 Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 15 Jun 2007
 Posts: 1233
 Location: http://www.SaviourFagFails.com/
 
 | 
			
				|  Posted: Tue Sep 04, 2007 9:27 am    Post subject: |   |  
				| 
 |  
				| pass = 1 ur crackme has a jump table and the win\wrong msg is decided here:
 
  	  | Code: |  	  | 00401143   .  833D D0014300>CMP DWORD PTR DS:[4301D0],1 0040114A   .  75 05         JNZ SHORT Crackme.00401151
 0040114C   .  E8 BEFEFFFF   CALL Crackme.0040100F
 00401151   >  33C0          XOR EAX,EAX
 00401153   .  833D D0014300>CMP DWORD PTR DS:[4301D0],1
 0040115A   .  0F94C0        SETE AL
 0040115D   .  85C0          TEST EAX,EAX
 0040115F   .  75 05         JNZ SHORT Crackme.00401166
 00401161   .  E8 BDFEFFFF   CALL Crackme.00401023
 | 
 the two calls call the jump to win\wrong msg.
 there is 1 "decoy" win msg. heres ur jump table:
 
  	  | Code: |  	  | 00401005   $ /E9 C6010000   JMP Crackme.004011D0 0040100A   $ |E9 71020000   JMP Crackme.00401280
 0040100F   $ |E9 FC020000   JMP Crackme.00401310                     ;  good
 00401014   . |E9 17020000   JMP Crackme.00401230
 00401019   . |E9 F2020000   JMP Crackme.00401310                     ;  good
 0040101E   $ |E9 4D000000   JMP Crackme.00401070
 00401023   $ |E9 A8030000   JMP Crackme.004013D0                     ;  bad
 00401028   . |E9 A3020000   JMP Crackme.004012D0
 | 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		|  |