downloadbrowsehaggar's KeyMe no.4

Download keyme4.zip, 30 kb (password: crackmes.de)
Browse contents of keyme4.zip

~~~~~~~~~~~~~~~~~~~~~~
KeyMe no.4 by HAGGAR
~~~~~~~~~~~~~~~~~~~~~~


This keyme came up after reversing some games CD-key checks so you can take it as some practice. Your task is to create generic keygen. It is very easy, but hey, this kind of checks usualy are (from my experience).

Greets goes to all good people on crackmes.de, BIW reversing, ARTEAM, SnD and FHCF. Special gretings is for folks who solved my previous crackmes.

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: Assembler

Published: 28. Apr, 2006
Downloads: 1020

Rating

Waiting for at least 3 votes
(we have only 2).

Rate this crackme:

Send a message to haggar »

View profile of haggar »

Solutions

Solution by AntiPro, published 24. may, 2006; download (56 kb), password: crackmes.de or browse.

AntiPro has rated this crackme as boring.

Submit your solution »

Discussion and comments

outtie
28. Apr 2006		For anyone that has motivation to reverse all the algos.

Address Disassembly Comment
00401476 cmp byte ptr [403754], 30 validate input 0-9 A-Z
004014F7 cmp al, byte ptr [ecx+4030FF] algo 1
00401571 lea eax, dword ptr [403714] algo 2
00401688 lea eax, dword ptr [403755] algo 3
00401765 xor ecx, ecx algo 4
0040185B lea eax, dword ptr [403755] algo 5
00401933 xor ecx, ecx algo 6
0040196B lea eax, dword ptr [403714] algo 7
00401A1A xor eax, eax verify algo output
[:.NaLe!T.:]
28. Apr 2006		Is it just me or does this algo realy looks like the one in EAGames (NFS:MW eg)? Similar to EA, generated key leaves third and fifth part of key without changing them.

172J-22L2-NALE-2NAL-NALE

Thanx to it, every DEViANCE keygen generates key that ends with xDEV where 'x' is custom char!
AntiPro
20. May 2006		I've "reversed" this algo with ease. There seems to be a whole decoy part in it where it calculates a CRC32 (amongst other things) but simply doesn't use the resulting value.
Shism
28. May 2006		antipro.. Why do you have anti-debugging in your keygen lol?
AntiPro
29. May 2006		Ehm, I don't know what you're talking about to be honest. Unless you mean the fact that it's a console application. Just search for strings and you're at the generation code quick.
AntiPro
29. May 2006		00401220 is the generateRegistration() function.
Shism
29. May 2006		Well your keygen has isdebuggerpresent and setunhandled excpetion filter....
Shism
29. May 2006		Oh The routine never gets called

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.