downloadbrowseBuKoBG's KeyFileMe #1

Download keyfileme.zip, 704 b (password: crackmes.de)
Browse contents of keyfileme.zip

No patching.Craft a *special* keyfile that shows good boy message.

Difficulty: 3 - Getting harder
Platform: Windows
Language: Assembler

Published: 07. Feb, 2011
Downloads: 355

Rating

Votes: 5
Crackme is boring.

Rate this crackme:

Send a message to BuKoBG »

View profile of BuKoBG »

Solutions

Solution by draww, published 11. feb, 2011; download (2 kb), password: crackmes.de or browse.

draww has rated this crackme as boring.

Solution by sphaaz, published 11. feb, 2011; download (3 kb), password: crackmes.de or browse.

sphaaz has not rated this crackme yet.

Solution by -Alex-, published 11. feb, 2011; download (2 kb), password: crackmes.de or browse.

-Alex- has rated this crackme as nothing special.

Solution by promix17, published 11. feb, 2011; download (2 kb), password: crackmes.de or browse.

promix17 has not rated this crackme yet.

Solution by Klaria, published 11. feb, 2011; download (2 kb), password: crackmes.de or browse.

Klaria has not rated this crackme yet.

Submit your solution »

Discussion and comments

Andersen
08. Feb 2011
Did this crackme has solution?
The code is simple, but GetTickCount returns differ values everytime, and this value compared with first DWORD bytes of keyfile. Oo
Anywhere, my Ollydebugger crashed in 40106D.
So, I thougth-no way
Andersen
08. Feb 2011
Hmm...
Seems, retn instruction do not knows address where return.
Is it trick?
Where is my IDA Pro+SoftIce? (=
Andersen
08. Feb 2011
so, may be something I am do not know?
Please, write the solution, anyone
Zephy
08. Feb 2011
nice pure code, ...but solution is not so nice :-)))
promix17
08. Feb 2011
Hm... I think, that solution is the buffer overflov... Wait a minute...
maverick`
08. Feb 2011
you are right...
promix17
08. Feb 2011
I solved it wait a tutorial!
Andersen
09. Feb 2011
Roger, here need overflow, but how?
I thougth, first dword of keyfile is not so important, it's not matched with GetTickCount()'s return.
But another part of the keyfile filled the stack.
Xspider
09. Feb 2011
i'm wondering where is that special key :p
Xspider
09. Feb 2011
ok i give up it's a BoF!!!!!!!!!
sphaaz
09. Feb 2011
actually it simple i wrote a tut w8ing for approval :)
just push the values for messgebox onto the stack and jump to call MessageBoxA :)

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.