| View previous topic :: View next topic |
| Author |
Message |
gunner54
Newbie cheater
![]() Reputation: 0
Joined: 17 Mar 2006
Posts: 12
|
 Posted: Wed Mar 05, 2008 4:32 pm Post subject: CrackMe - Gunner54 |
 |
|
can you crack it wiccaan? 
i want the key, not a patch.
UPLOADED NEW!
Wrong Upload Before.
Last edited by gunner54 on Thu Mar 06, 2008 10:10 am; edited 4 times in total |
|
| Back to top |
|
 |
HolyBlah
Master Cheater
![]() Reputation: 2
Joined: 24 Aug 2007
Posts: 446
|
| Posted: Thu Mar 06, 2008 6:54 am Post subject: |
|
|
The idea of creating a crack me is show to others what you can do, not how you can use encryption.
but here is the real .exe
|
|
| Back to top |
|
|
gunner54
Newbie cheater
![]() Reputation: 0
Joined: 17 Mar 2006
Posts: 12
|
| Posted: Thu Mar 06, 2008 9:57 am Post subject: |
|
|
no o.o? thats a program i made that has nothing to do with this crack me.
the program isn't encrypted. Theirs a word (KeyCode) in the crack me thats encrypted. I want you too tell me the word.
EDIT : Uploaded wrong thing. Sorry.
|
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 198
Joined: 25 Jan 2006
Posts: 8517
Location: 127.0.0.1
|
| Posted: Thu Mar 06, 2008 4:19 pm Post subject: |
|
|
Length check is 7 characters long:
| Code: | | 004011A2 |. 83F9 07 CMP ECX,7 |
Encrypt function for the key inputted:
| Code: | 00401123 |. /74 19 JE SHORT CrackMe.0040113E
00401125 |> |8A0432 /MOV AL,BYTE PTR DS:[EDX+ESI]
00401128 |. |8BFE |MOV EDI,ESI
0040112A |. |02C3 |ADD AL,BL
0040112C |. |83C9 FF |OR ECX,FFFFFFFF
0040112F |. |880432 |MOV BYTE PTR DS:[EDX+ESI],AL
00401132 |. |33C0 |XOR EAX,EAX
00401134 |. |42 |INC EDX
00401135 |. |F2:AE |REPNE SCAS BYTE PTR ES:[EDI]
00401137 |. |F7D1 |NOT ECX
00401139 |. |49 |DEC ECX
0040113A |. |3BD1 |CMP EDX,ECX
0040113C |.^|72 E7 \JB SHORT CrackMe.00401125
0040113E |> \8BFE MOV EDI,ESI |
Compare function after your key is encrypted:
| Code: | 00401082 |. BE A0E04000 MOV ESI,CrackMe.0040E0A0
00401087 |. B8 A4ED4000 MOV EAX,CrackMe.0040EDA4
0040108C |> 8A10 /MOV DL,BYTE PTR DS:[EAX]
0040108E |. 8A1E |MOV BL,BYTE PTR DS:[ESI]
00401090 |. 8ACA |MOV CL,DL
00401092 |. 3AD3 |CMP DL,BL
00401094 |. 75 1E |JNZ SHORT CrackMe.004010B4
00401096 |. 84C9 |TEST CL,CL
00401098 |. 74 16 |JE SHORT CrackMe.004010B0
0040109A |. 8A50 01 |MOV DL,BYTE PTR DS:[EAX+1]
0040109D |. 8A5E 01 |MOV BL,BYTE PTR DS:[ESI+1]
004010A0 |. 8ACA |MOV CL,DL
004010A2 |. 3AD3 |CMP DL,BL
004010A4 |. 75 0E |JNZ SHORT CrackMe.004010B4
004010A6 |. 83C0 02 |ADD EAX,2
004010A9 |. 83C6 02 |ADD ESI,2
004010AC |. 84C9 |TEST CL,CL
004010AE |.^ 75 DC \JNZ SHORT CrackMe.0040108C
004010B0 |> 33C0 XOR EAX,EAX
004010B2 |. EB 05 JMP SHORT CrackMe.004010B9 |
Key is: Benjooo
_________________
- Retired. |
|
| Back to top |
|
|
gunner54
Newbie cheater
![]() Reputation: 0
Joined: 17 Mar 2006
Posts: 12
|
| Posted: Thu Mar 06, 2008 4:40 pm Post subject: |
|
|
| How did you reverse the string encryption function?
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 198
Joined: 25 Jan 2006
Posts: 8517
Location: 127.0.0.1
|
| Posted: Thu Mar 06, 2008 4:43 pm Post subject: |
|
|
| gunner54 wrote: | | How did you reverse the string encryption function? |
I fished it. I'm too lazy to rewrite things like actual keygens do.
_________________
- Retired. |
|
| Back to top |
|
|
gunner54
Newbie cheater
![]() Reputation: 0
Joined: 17 Mar 2006
Posts: 12
|
| Posted: Thu Mar 06, 2008 4:52 pm Post subject: |
|
|
How can you when the string "Benjooo" is encrypted and stays encrypted.
It encrypts the string you input, and compares it to an already encrypted string. No information is leaked.
|
|
| Back to top |
|
|
sumnewdude
Expert Cheater
![]() Reputation: 0
Joined: 23 May 2007
Posts: 181
Location: Where you least expect me.
|
| Posted: Thu Mar 06, 2008 7:15 pm Post subject: |
|
|
| gunner54 wrote: | How can you when the string "Benjooo" is encrypted and stays encrypted.
It encrypts the string you input, and compares it to an already encrypted string. No information is leaked. |
he just figures out how you encripted it and decripts it manually. happend to me 2 times already.
_________________
.erutangis ruoy ni siht esu neht ,sdrawkcab siht daer ot hguone trams erew uoy fI |
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 198
Joined: 25 Jan 2006
Posts: 8517
Location: 127.0.0.1
|
| Posted: Thu Mar 06, 2008 10:07 pm Post subject: |
|
|
On the compare function breakpoint on:
| Code: | | 00401092 |. 3AD3 |CMP DL,BL |
and
| Code: | | 004010A2 |. 3AD3 |CMP DL,BL |
Compare the bytes, change the password entered as needed depending on the current byte being checked to.
_________________
- Retired. |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
