br0ken's Sleepy Keygenme
| Download cme5.zip, 23 kb (password: crackmes.de) Browse contents of cme5.zip Sleepy Keygen me
Difficulty: 3 - Getting harder | RatingVotes: 6 View profile of br0ken » |
Solutions
Solution by ForFun, published 03. mar, 2009; download (38 kb), password: crackmes.de or browse.
ForFun has rated this crackme as quite nice.
Discussion and comments
| E1xis 15. Feb 2009 | Nice stuff br0ken! |
|---|---|
| br0ken Author 17. Feb 2009 | Updated version. |
| br0ken Author 20. Feb 2009 | This might be slightly harder than 2. Maybe 2.5 ? So, its changed to 3 now. Have fun :P |
| obnoxious 25. Mar 2009 | really cool one!!!!! |
| mjones 25. Aug 2009 | I have a question about resolving names. In ForFun's solution, his listing shows a call to fopen at RVA 4013DA; however Olly shows CALL keygenme.00402692 for me. Now, I did gather that this was a call to fopen seeing the previous 2 items pushed onto the stack. I'm just wondering if you got Olly to say it was fopen, or if you just asserted that. Apologies for such a noob question but I googled around for a bit and came back with nothing. Perhaps I just lack the proper terminology. |
| andrewl.us Moderator 25. Aug 2009 | mjones: do you know about IDA? http://www.hex-rays.com/idapro/idadownfreeware.htm |
| mjones 25. Aug 2009 | Hmm, IDA does find the function name properly. So my questions are: 1) Why doesn't Olly? 2) How do I make Olly find the correct function name? 3) How does one build/compile(/or link?) a program to result in this behavior? I suspect questions 1 & 3 are closely related. Again, apologies for the noob questions, this is a hobby for me that I very much enjoy and would like to improve. |
You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.