downloadbrowsedocs1s's d0cs1s v1

Download d0cs1s.zip, 27 kb (password: crackmes.de)
Browse contents of d0cs1s.zip

d0cs1s v1 is a keygenme that utilizes a md5 hash generator, rc4 and a custom algorithm using a dual sliding key system.

hints and tips

* no anti debug tricks
* md5 hash generator will create a key watch is different on every computer.

* all strings are encrypted with each other string interlaced.

* good boy message is encrypted with md5 hash.

* serial is created from user inputed name + md5 + rc4(not in this order)

don't patch. tutorial is only solution.

Difficulty: 4 - Needs special knowledge
Platform: Windows
Language: C/C++

Published: 16. Jul, 2010
Downloads: 159

Rating

Waiting for at least 3 votes
(we have only 1).

Rate this crackme:

Send a message to docs1s »

View profile of docs1s »

Solutions

There are no solutions to this crackme yet. Have you solved it? Please write a tutorial and submit it here!

Submit your solution »

Discussion and comments

docs1s
Author
16. Jul 2010
any comments would be greatly appreciated!
a big hint I left out is that the serial is not the length of a md5 hash its much shorter.

this is my first keygenme so please let me know if there is anything I could do differently.

compiled with visual studio 2005 + msvcrt_winxp.obj.
Sh4DoVV
30. Jul 2010
Hi Friend
Easy CrackMe
Put BreakPoint On :
00401F21 CMP DWORD PTR SS:[ESP+14],EDI
Run And Enter Name And Fake Serial
For Correct Serial Write Down Value In EDI Register And Change Hex Value To Decimal With Calculator Of Your Windows And Enjoy
freesoul
18. Aug 2010
Hmm... I think you got bugs on your crackme.
Serial isn't created by name, md5 and rc4

The serial is created by the last letter of the name, a stack offset and a multiply operation, lol

00401EE5 |. 8D7C3C 6C |LEA EDI,DWORD PTR SS:[ESP+EDI+6C]

valour = ESP (SS) -> Stack offset + EDI (last character of name) + 0x6EC

Then multiplied by 0x20618
00401F1B |. 69FF 18060200 IMUL EDI,EDI,20618

and compared to the integer we entered
00401F21 |. 397C24 14 CMP DWORD PTR SS:[ESP+14],EDI


Repair your crackme pls :D

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.