downloadbrowsebpx_'s Bustme #4

Download bm4.zip, 13 kb (password: crackmes.de)
Browse contents of bm4.zip

Unpack it and find a serial.
To find a serial, you may have to think like a hacker =)

Difficulty: 5 - Professional problem to solve
Platform: Windows
Language: Assembler

Published: 04. Dec, 2006
Downloads: 631

Rating

Waiting for at least 3 votes
(we have only 2).

Rate this crackme:

Send a message to bpx_ »

View profile of bpx_ »

Solutions

Solution by deroko, published 06. jan, 2007; download (9 kb), password: crackmes.de or browse.

deroko has rated this crackme as quite nice.

Submit your solution »

Discussion and comments

hardcoder
04. Dec 2006
Nice to see you again, It is good to check CC on TLS callback, I successfully Separeted child from parent but obfucation of code in child gets me to the hell... I don't know what to do next, waiting for someone to write a good tutorial....
@ deroko , common you gonna do it :-)
bpx_
Author
04. Dec 2006
ahh, school has been keeping me busy =)
Good luck with this one guys!
Savage
05. Dec 2006
strange, i have never seen something like this before... 8)
haggar
05. Dec 2006
How? Trick that he uses at the start is same as ExeCryptor use ;)

It is very simple to remove TLS trick, also exception trick. Crackme doesn't have checksums so you can patch some stuf. Obfuscation is rather easy to remove.
kao
05. Dec 2006
Pretty nice collection of tricks. For newbie this will be quite a challenge, for an experienced guy - toy for a coffee break.. :)
red477
13. Dec 2006
Really a nice crackme. I managed to find a serial.(the hint "To find a serial, you may have to think like a hacker =)" is very useful!!)
However, I have not been learning unpacking so can some one give some hints to remove the junkcodes? I mean something like this:
pushfd
xor eax,ecx
xor eax,ecx
popfd
There are so many, so what should do for analysis' convenience? Do i have to patch them to nops?
deroko
05. Jan 2007
hehe nice, didn't know that this one is up :) not that hard imho :) will write solution.

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.