downloadbrowseKLiZMA's UnpackMe #1

Download UnpackMe#1_by_KLiZMA.zip, 197 kb (password: crackmes.de)
Browse contents of UnpackMe#1_by_KLiZMA.zip

After 2 months...
KLiZMA wrote another unpackme for you.

Rulz:

1. Unpack it maliciously...
2. Change "UNREGISTERED" to "REGISTERED"
3. Write tutorial about...

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: Borland Delphi

Published: 27. Apr, 2006
Downloads: 1333

Rating

Votes: 8
Crackme is boring.

Rate this crackme:

Send a message to KLiZMA »

View profile of KLiZMA »

Solutions

Solution by kienmanowar, published 14. may, 2006; download (248 kb), password: crackmes.de or browse.

kienmanowar has rated this crackme as nothing special.

Solution by EvOlUtIoN, published 05. may, 2006; download (246 kb), password: crackmes.de or browse.

EvOlUtIoN has rated this crackme as nothing special.

Submit your solution »

Discussion and comments

deroko
27. Apr 2006
nice one, my russian brother :)
KillYuRi
28. Apr 2006
ya pretty simple
mm execute first pushad, breakpoint on hardware access [esp register]
reconstruct with import reconstructor 1.6

then hex edit it ;) -Good example of this in the ARTeam tuts.
EvOlUtIoN
28. Apr 2006
LOL very simple!
kienmanowar
12. May 2006
Done! I wrote another tut !! Thanx all :)
yaMobilko
05. Apr 2008
lol brains not needed
-DIMAIN-
07. Apr 2008
lol
Published: 27. Apr, 2006
Downloads: 666
r-Evolution
04. Oct 2010
well!!i was quite confused....I found the OEP but when i tried to rebuild IAT i found too many invalid pointers...It looks like there something like IAT redirection or a similar anti-unpacking trick right???
Thanks my communist mate
r-Evolution
04. Oct 2010
but as i see from the comments it has to do with overlay...

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.