downloadbrowseKLiZMA's CrackMe #4 (Combo)

Download CrackMe_#4_by_KLiZMA.zip, 3 kb (password: crackmes.de)
Browse contents of CrackMe_#4_by_KLiZMA.zip

Hola!
KLiZMA made another crackme for you!
Algo combined from 1st, 2nd and 3rd crackmes.

Rulz:

1. unpack it
2. complete 3 stages with success
3. write tutorial and make keygen
4. no self-keygenning and 'all accept' patching

Difficulty: 1 - Very easy, for newbies
Platform: Windows
Language: C/C++

Published: 25. Jan, 2006
Downloads: 1407

Rating

Votes: 4
Crackme is quite bad.

Rate this crackme:

Send a message to KLiZMA »

View profile of KLiZMA »

Solutions

Solution by Kerberos, published 03. feb, 2006; download (62 kb), password: crackmes.de or browse.

Kerberos has rated this crackme as nothing special.

Solution by Ox87k, published 16. feb, 2006; download (42 kb), password: crackmes.de or browse.

Ox87k has not rated this crackme yet.

Solution by HMX0101, published 22. feb, 2006; download (31 kb), password: crackmes.de or browse.

HMX0101 has rated this crackme as boring.

Submit your solution »

Discussion and comments

Ank83
25. Jan 2006
Is it me or this crackme in the stage one take only numbers betwen 0 and 11 ?
Ank83
25. Jan 2006
Need help.
What does SAR function do. SAR EAX, 0A ?
If I have 100 004 in EAX it give me the value of 97. What does SAR do.
Thanks
Ank
thrall
25. Jan 2006
SAR is shift arithematic right.
SAR EAX,0A means shift contents of EAX by A(10 decimal)
bits to the right.
HMX0101
25. Jan 2006
some info:

"SAR Shift Arithmetic Right; Intel 80x86; shifts the contents of a data register or memory location (8, 16, or 32 bits) to the right (towards least significant bit) by a specified amount (by 1, by 0 to 31 bits specified by an immediate operand, or by 0-31 bits specified by the contents of the CL register), with the low-order bit being shifted into the carry flag, the original high-order bit being replicated and shifted into the high-order bit; sets or clear flags"

extracted from:
http://www.osdata.com/topic/language/asm.htm
Ank83
25. Jan 2006
Thanks.
I understand the algo of this crackme I wrote a tutorial, and I was thinking to write a keygen tomorow on work. But the problem is that on the machines on work we have only VB. And SAR is not implemenetd in VB. To write the function will need me more than 2 hours. :P
Thanks to all !
KLiZMA nice work. Keep going ! I like the fact that in every new crackme you add something new.
HMX0101
26. Jan 2006
I think that Visual Basic can manage assembler
KLiZMA
Author
26. Jan 2006
Phanx:

Ank83 - questions
HMX0101 - answers
HMX0101
26. Jan 2006
i'm working in the keygen
HMX0101
28. Jan 2006
yes, it is a bug
because, if the ID is less than 0x1869F, close the crackme, and if the ID is greater than the 3rd serial close the crackme, but the autor says in the readme:

"4. no self-keygenning and 'all accept' patching"

Regards,
HMX0101
KLiZMA
Author
02. Feb 2006
DON'T BE STUPID!

THERE IS NO BUGS IN THE CRACKME!!!

TRY TO SOLVE IT AGAIN, TAKE PIECE OF SHEET AND SOME BRAIN...

I HOPE THAT THE GOOD SOLUTION WILL BE POSTED!
Ank83
02. Feb 2006
Stage one: condition 1 for first entered values
Stage two: condition 1 for new entered value
Stage three: codition 1 for first entered values
contition 2 for first entered values
So this means you can pass the two levels, but in the third stage you have new condition for the before entered values. So when writting a keygen you must create values that valid for all conditions.
I think that this is the problem that is confusing you.
I cant write keygen becase all the language I know didn't implement SHR. I didn't know to program in ASM so well.
Regard Ank83
CuTedEvil
02. Feb 2006
as KLiZMA (the author) said, the crackme is not bugged.
It has been tested. guys, you have to analyze the crackme more carefully :)
Ox87k
02. Feb 2006
no no read with more attenction my posts:
QUOTE:
sorry, i was confused!!! delete my post plz, is not correct!! eheh, lol ^^'

however...
My solution, write some time ago, was rejected because my dumped file don'w go in other machine and i don't know. In my 2 pc it work perfectly. ZaiRoN said me that the call SetUnhandleExceptionFilter in his pc point in a another area and i don't understand because in my pc work.

ImportRec don't show me one call sospect or invalid and the rebuild of iat is good.

If u want a keygen+tutorial i'll re-send my solution and maybe will be accepted.
KLiZMA
Author
03. Feb 2006
to Ox87k:

BaD MessageS DeleteD !
CuTedEvil
03. Feb 2006
Ox87k, ur solution was invalid. as ZaiRoN told you, dumped file isn't valid. (on my machine too).
Try to fix this, or find another way to correctly unpack.
Ur solution should be accepted then :)
Ox87k
03. Feb 2006
yes cutedevil, my dumped crashed in all other machine but in my 2 pc work perfectly. Really, i don't understand how to make a valid dumped file... only 1 import is wrong... :(
KLiZMA
Author
04. Feb 2006
to Kerberos:

Pnanx! Very intelligent solution!
KLiZMA
Author
16. Feb 2006
to Ox87k:

With big cruelty! Thanx...
HMX0101
16. Feb 2006
i have some problems on the 1st serial,
somebody can help me?
Ox87k
16. Feb 2006
to Klizma:
i would shot u because the dump of ur crackme has made me to become crazy!!!! :P

sorry for the delay of the solution but I've had problems with the dump file!

Anyway, thx for this crackme! I'm waiting for KLiZMA Crackme#5 ;)
HMX0101
16. Feb 2006
i'm waiting the crackme #5 :D

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.