
bpx_'s Bustme #4
Download bm4.zip, 13 kb (password: crackmes.de) Browse contents of bm4.zip Unpack it and find a serial.
Difficulty: 5 - Professional problem to solve | RatingWaiting for at least 3 votes View profile of bpx_ » |
Solutions
Solution by deroko, published 06. jan, 2007; download (9 kb), password: crackmes.de or browse.
deroko has rated this crackme as quite nice.
Discussion and comments
hardcoder 04. Dec 2006 | Nice to see you again, It is good to check CC on TLS callback, I successfully Separeted child from parent but obfucation of code in child gets me to the hell... I don't know what to do next, waiting for someone to write a good tutorial.... @ deroko , common you gonna do it :-) |
---|---|
bpx_ Author 04. Dec 2006 | ahh, school has been keeping me busy =) Good luck with this one guys! |
Savage 05. Dec 2006 | strange, i have never seen something like this before... 8) |
haggar 05. Dec 2006 | How? Trick that he uses at the start is same as ExeCryptor use ;) It is very simple to remove TLS trick, also exception trick. Crackme doesn't have checksums so you can patch some stuf. Obfuscation is rather easy to remove. |
kao 05. Dec 2006 | Pretty nice collection of tricks. For newbie this will be quite a challenge, for an experienced guy - toy for a coffee break.. :) |
red477 13. Dec 2006 | Really a nice crackme. I managed to find a serial.(the hint "To find a serial, you may have to think like a hacker =)" is very useful!!) However, I have not been learning unpacking so can some one give some hints to remove the junkcodes? I mean something like this: pushfd xor eax,ecx xor eax,ecx popfd There are so many, so what should do for analysis' convenience? Do i have to patch them to nops? |
deroko 05. Jan 2007 | hehe nice, didn't know that this one is up :) not that hard imho :) will write solution. |
You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.