downloadbrowseFatmike's Fatmike's crackme #3

Download Patrick.zip, 236 kb (password: crackmes.de)
Browse contents of Patrick.zip

Have fun with my third crackme! Everything is allowed, but the main goal is to detach the exe from the protection dll. See more information in the 'About' box.
Tested on WinXP SP2

Difficulty: 3 - Getting harder
Platform: Windows
Language: C/C++

Published: 24. May, 2006
Downloads: 925

Rating

Votes: 9
Crackme is quite nice.

Rate this crackme:

Send a message to Fatmike »

View profile of Fatmike »

Solutions

Solution by X-Treem, published 22. jul, 2006; download (191 kb), password: crackmes.de or browse.

X-Treem has rated this crackme as quite nice.

Submit your solution »

Discussion and comments

thehyper
25. May 2006
Nice crackme. But it is too easy to detach dll when you are using softice :)
Fatmike
Author
25. May 2006
Thanks! Yes i know. I should have called it antiolly.dll :)
SUB Z3R0
28. May 2006
Was Nice !
http://subzero.shabgard.org/FatMike3Cracked.zip
kao
29. May 2006
I want to do it without SoftICE, so I have to think a bit.. Really nice! :))
ricnar456
04. Jun 2006
very good crackme

http://www.ricnar456.dyndns.org/Upload/Patrick.rar

user:hola pass:hola

unpacked and cleaned the dll in OLLYDBG.

Very Good Work
ricnar456
04. Jun 2006
in FTP

ftp://www.ricnar456.dyndns.org/Upload/Patrick.rar

user:hola pass:hola

unpacked and cleaned the dll in OLLYDBG.

Very Good Work
Ricardo Narvaja
Fatmike
Author
04. Jun 2006
Good job! Are you going to write a tut?
ricnar456
05. Jun 2006
yes i´m writing now

Ricardo Narvaja
ricnar456
08. Jun 2006
is submitted 7/6 i think in any moment will be accepted and displayed.

Ricardo Narvaja
ricnar456
08. Jun 2006
http://rapidshare.de/files/22550289/SOLUTION_TO_FATMIKE.rar.html

this is the solution while is accepted can be readed from this link.

Ricardo Narvaja
Fatmike
Author
08. Jun 2006
thanks ricardo for your great tut. im going to ask someone to translate the long spanish tut.and of course...im going to fix the simple method first ;)
greets fatmike
ricnar456
08. Jun 2006
thanks for your great crackme, i spend a great time trying and learning with it, is a good piece of protection antiolly.

Ricardo Narvaja
hardcoder
17. Jun 2006
@Ricardo Who gave it to you???? me / arjuns lol
ricnar456
18. Jun 2006
hehe thanks arjuns, you give me the crackme, and i´m writing the second part, for crackslatinos, my solution was rejected here. (spanish is not accepted)

Ricardo Narvaja
ricnar456
24. Jun 2006
well i complete the second part of the tutorial in spanish and running in OLLYDBG from the start till the OEP of the second process and correctly decrypted, repared, clean the dll, and defeat completely the protection all in OLLYDBG from start to end.

Ricardo
Fatmike
Author
24. Jun 2006
Thanks ricardo. Can you upload part1 and part2 (and small english tut maybe) on rapidshare ?

Fatmike
Fatmike
Author
24. Jun 2006
@Ricardo: On which site do you publish your tuts?
ricnar456
24. Jun 2006
http://rapidshare.de/files/23934701/47-INTRODUCCION_AL_CRACKING_CON_OLLYDBG_PARTE_47.rar.html

I have a question for you, i solve completely the crackme and find the CreateFileA problem and solve, the question is, the CreateFileA trick with the error of sharing is a bug of OLLY? was deliberate produced, or was accidental, i have not find info of this problem of OLLYDBG with CreateFileA and sharing. (or was produced for the filemapping?)
I think is a OLLYDBG bug, the bad response in this api and the error of sharing, can you tell me for personal information?

Thanks
Ricardo Narvaja
Ricardo
ricnar456
24. Jun 2006
http://rapidshare.de/files/22321746/INTRODUCCION_AL_CRACKING_CON_OLLYDBG_PARTE_46.rar.html

part 46

ricardo
Fatmike
Author
25. Jun 2006
hi ricardo,

thanks for uploading your tut! About the CreateFileA thing: No, i did not know about the problem of CreateFile with FILE_SHARE_READ.

Again, on which webpage do you publish your tutorials?
I could not find on cr*cklatin*s...

greets fatmike
ricnar456
25. Jun 2006
well you find a very antiolly nasty trick hehe, was very hard for find this problem.

i have a http in my machine for all tutorial of craklatinos

http://www.ricnar456.dyndns.org/
http://ricnar.no-ip.org/
user:hola
pass:hola

ftp://www.ricnar456.dyndns.org/
ftp://ricnar.no-ip.org/
user:hola
pass:hola

for the parts of the introduction to cracking from zero in OLLYDBG, this is the link

http://ricnar.no-ip.org/CRACKING/INTRODUCCION%20AL%20CRACING%20CON%20OLLYDBG%20DESDE%20CERO/

there are a folder with any machine translated tuts of this parts.

and the turtorials of crackslatinos team

http://ricnar.no-ip.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS%20NUMERADAS/

with the same user y pass:hola
be patient with the http and ftp, is in my machine and i rebbit, and use, and in moments is down.

Thanks for all
ricardo narvaja
ricnar456
30. Jun 2006
http://storage.ricardonarvaja.com.ar/web/


this is my new page the ftp and http of my machine are out.

i´m uploading all to this and building a page

Ricardo Narvaja
Fatmike
Author
07. Jul 2006
lol ricardo, nice pic on your homepage
http://www.ricardonarvaja.com.ar/ricnar.jpg

patrick looks dead, but he's not...he will come back...;)
ricnar456
07. Jul 2006
is not mine a cracklatinos member send to the list, and is very cool for this reason i put in the page is a good work.

Good new patrick return was a good work, nice crackme i learn a lot from this crackme.

ricnar456
Fatmike
Author
26. Jul 2006
Hi X-Treem,

thanks for your solution! I have seen a similar solution before, i will have to work on that :)
X-Treem
26. Jul 2006
you are welcome :) great crackme i had to swear a lot befor thinking o that and... lol i was quite drunk when i made it :) that's why so messy. ricnar one is great, but removing write flag from data section and using olly as JIT debugger is not working for me. Buh

thx to you for you crackme

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.