downloadbrowsederoko's deroko's dump-me

Download dcrackme3.zip, 50 kb (password: crackmes.de)
Browse contents of dcrackme3.zip

I wrote protector today so here is dump-me exe file "protected with it"...

Objective is to dump-file and fix-imports...
Do what ever you want to make it work...
protector is fully written in Asm, but protected app is simple "Hello world" in C...

Progy is tested on XP and win2k, but is should work on other windowses as well...

Difficulty: 3 - Getting harder
Platform: Windows 2000/XP only
Language: Assembler

Published: 15. Aug, 2005
Downloads: 1036

Rating

Votes: 12
Crackme is nothing special.

Rate this crackme:

Send a message to deroko »

View profile of deroko »

Solutions

Solution by ingsoc, published 20. aug, 2005; download (31 kb), password: crackmes.de or browse.

ingsoc has rated this crackme as quite nice.

Solution by jE!, published 20. aug, 2005; download (75 kb), password: crackmes.de or browse.

jE! has rated this crackme as quite nice.

Submit your solution »

Discussion and comments

mr.schyte
15. Aug 2005
A little PE editing never hurts :)
deroko
Author
15. Aug 2005
well probably you'll have to fix code section b/c I've used dizzy (hxxp://deroko.headcoders.net/dizzy.zip) to foobar some procedures =)
LuCiFeR
18. Aug 2005
iek, ether it was too easy or i forgot something -.-
deroko
Author
18. Aug 2005
if you fixed code section than everything is ok + rebuild import so file will work w/o it's own loader.
ingsoc
18. Aug 2005
Don't be so harsh when judging this crackme. It's pretty fun to do, and can be used as a beginner's intro to commercial protectors.

Unpack-mes are often easier than keygen-me type of crackmes are usually require a lot more time to program.

Cheers to deroko, my solution tut is almost complete. This crackme was fun and didn't try to bore me with tons of repetitive stuff or unsolvable serial algo.

/ingsoc
jE!
18. Aug 2005
i played with it, is funny;

as about easy.. but always you can do harder & interestingER..
for example dont use Imprec or other, but try manually restore original Imports, ok!?

i will try to write solve...
deroko
Author
18. Aug 2005
tnx guys for kind words =) I really appriciate that...
jE!
19. Aug 2005
i submitted my Xsolve, with bunch of bug-reports :))
deroko
Author
19. Aug 2005
kewl, I'm looking forward to it...
anyway I have improved protector so it doesn't dump, you know what I mean =) and import patching is now even kewler, and everything is managed trough debugger + one anti-debug thread... I'm planing also to put 2 poly engines something like 2 layers of simple encryption =) instead of current one, also some SEHs are removed from this poly =)
But anyway I won't subbmit it here b/c it will be really rally HARD crackme and I didn't solve any of HARD ones =)
deroko
Author
20. Aug 2005
yap those error with CloseHandle are removed yesterday when I reviewed my source and that tiny SEH is just random generated in poly engine, sometimes there is eax, or any other reg except ebp and esp...

great solutions =)

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.