CrackMe® Practices for Newbies ~ Moderated

Re:Hey get your own thread :)
Friday, 22-Jan-99 12:23:20
    209.142.46.118 writes:

    Well guys and dolls

    as I tried to explain earlier...using the alt-f4 routine...shows "Thank you for registering" in the edi and ecx
    register.....so far the programs I know of at least that show a value in ecx have ALWAYS been the correct password under 2 or 3 guieses...

    1 It is the correct value as is...without changes

    2 It is a correct password but needs to be changed to a different value thru some mathimatecal change..pick one; multi; xoring; ect;

    3 The first value shown is NOT correct; as in Sandmans essay 63 HTML editor; the first value is a check
    ...you must x OUT again from the bpx 0f00d9ea breakpoint and allow it to break back again for a SECOND check of edi and ecx...I think even sometimes even a third time depending on how many CHECKS the author inputted,,,and in this way you can see a valid serial....which once again may be in the form of #1 or #2 above.....

    These are only my opinions but I think one of these is the case here....

    In my second break back in to 0f00d9ea I saw different values in the registers as if they were being manipulated by a mathmatical occurance...but haven't understood it yet..if it means anything at all...

    One other thing I found yesterday which you probably all know already; but I did not;

    ANY UPPER OR LOWER CASE LETTER XORED BY 32h (or 2)will always be the inverse of itself...

    (note: the symbol ^ means 'xor')

    T...54hex....84Decimal=. 84^32 = 116 = t
    h...68h.....104.......= 104^32.= .72.= H
    a...61h......97.......=..97^32.=..65.= A

    Do you see the co-orlation? (IT may not have anything to do with this...but wanted to point it out)

    I have tried changing the values from upper to lower (example: tHANK YOU...ect);

    using all of the hex values strung together as a reg input (example: 5468616E...ect);

    all of the decimal values strung together as a reg input;(example: 8410497...ect)

    tried adding them all up as a total value for a reg input (example: 84+104+97+...ect) and using this as a reg input;

    and none seem to register; IF I have kept my values and addition correct at least...(maybe NOT)

    This,if my input was correct, would mean to me:

    1."Thank you for registering" is not the correct serial.
    2. I have messed up in my math somewhere; or mis-typed and input...
    3. There is another math calculation being performed on this value of "Thank you for...which will return an entirely different value as serial input.....

    Just some additional thoughts I'll work on today.

    Jeff

    Jeff


Message thread:

Jeff's thread.... (Jeff) (20-Jan-99 18:37:53)

Back to main board


Message subject:

Name: (optional)

Email address: (optional)

Type your message here:




Back to main board

Copyright © ProSoft 1997-1998
All rights reserved.