downloadbrowsemndg's gama

Download 02_crackme_stage3_gama.zip, 8 kb (password: crackmes.de)
Browse contents of 02_crackme_stage3_gama.zip

From a serie of crackmes I'm developing for my wargame page

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: C/C++

Published: 05. May, 2014
Downloads: 359

Rating

Waiting for at least 3 votes
(we have only 1).

Rate this crackme:

Send a message to mndg »

View profile of mndg »

Solutions

Solution by baderj, published 13. nov, 2014; download (158 kb), password: crackmes.de or browse.

baderj has not rated this crackme yet.

Submit your solution »

Discussion and comments

korsader
09. May 2014
Only bruteforce - deeper
idid231
10. May 2014
printable or not? not sure what's purpose of this crackme
vani172
10. May 2014
Am I just supposed to get a valid serial message? If so then this is too easy.
Duraven
10. May 2014
I would say the goal of this crackme is to get the password
Seonid
12. May 2014
It is, however the OP does not make that clear and the solution itself requires a brute-force approach once the encoding function is identified as it in effect creates a hash. Personally I stopped when I RE'd that function as it's not RE any more beyond the trivial patch to get the GoodBoy.
Unknown Coder
15. May 2014
<h1>Very easy</h1>
mtriple
23. May 2014
i spent lot time on this code with no success,
im noob but i pass the wrong mssg which is considered as true JNZ value, i think the file has been patched with wrong statement, i cannt analyze this one
cmp eax, 0B528B18Bh

its do this :
1- MOV DWORD PTR DS:[ESI+26],EAX
how i can check ESI value ?
2- some or and xor but i cant analyze it .
korsader
24. May 2014
I found the right key - eDDQDR
Duraven
24. May 2014
@korsader
Congratz. I tested all the possibilities for 5 characters but couldn't be bothered to run brute-forcer for more, how long did it take your prog to get the correct password?
korsader
25. May 2014
@Duraven
Len key = 6
Alphabet 'abcdefghijklmnopqrstuvwxyz'
find key 30 second
mtriple
25. May 2014
so any idea of how ?
did u do it by analyzing or some tools ?
i think the point is to analyze doesnt it ?
mtriple
25. May 2014
tha key is valid but its not the right key ,

check this owner site :
http://yoire.com/challenges/reversing/pe.stage3/02_crackme_gama.php

i tested ur pass is not correct
korsader
26. May 2014
right key-deeper
check this site )))
Duraven
27. May 2014
@korsader
Could you pm me with your brute-forcer algo? I remember when I quickly wrote a brute-forcer, it was taking much longer
korsader
27. May 2014
http://rghost.net/55889184
DreamiX
28. May 2014
I did not find key but i pathed it and now it always says that key is right.
Solution:
=Original bytes=
8B B1 28 B5 45 16 6A 40
=Replaces bytes=
8B B1 28 B5 90 90 6A 40
Duraven
30. May 2014
@korsader
Sorry to post it that late, I've been busy a little. Thanks a lot for your code, I though there must be a trick, but the only "trick" is the limited character space, thanks again buddy. For a key space, i.e., all visible ascii characters 32-128, brute-force would take much longer :P
Felipeninja
09. Jun 2014
Hi could you pm me with your brute-forcer algo again please ???
amigossq
28. Oct 2014
some keys are :
cBPoG\:s`dedPer
HdtgnrdWXeDDPdR
baderj
28. Oct 2014
Nice crackme. It can be solved without brute forcing.

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.