downloadbrowsemucki's mucki's protector

Download mp.zip, 20 kb (password: crackmes.de)
Browse contents of mp.zip

Welcome to a new challange by mucki!

This time I wrote an unpackme in MASM. I will publish the source if someone solved it. I hope in the future you will write your own packer instead of using upx or something else. I tried to make it as easy as possible so it's great for newbies.

Task for the newbies: unpack the protector and write a tutorial
Task for the professionals: write an unpacker and a tutorial

Tested on WinXP SP1 but should also work on other windows os.
Regards,

mucki

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: Assembler

Published: 12. Apr, 2007
Downloads: 1039

Rating

Votes: 6
Crackme is boring.

Rate this crackme:

Send a message to mucki »

View profile of mucki »

Solutions

Solution by profdracula, published 18. apr, 2007; download (5 kb), password: crackmes.de or browse.

profdracula has rated this crackme as nothing special.

Solution by El_PuPaZzArO, published 18. apr, 2007; download (990 b), password: crackmes.de or browse.

El_PuPaZzArO has not rated this crackme yet.

Submit your solution »

Discussion and comments

TFB
10. Apr 2007
Nice :) But its kind of easy...
Ox87k
11. Apr 2007
the src of a new packer is always good XD
good challenge mucki, you are always original..
deroko
11. Apr 2007
unpacker is not needed :) Only simple code that should decrypt code section. If you want unpacker I can write it, it ain't hard :)

Anyway good to see that more unpackmes are showing up. I'm really bored of various keygenmes...
mucki
Author
11. Apr 2007
I know unpacking is not really a challange. maybe the source is a bit more interesting - so try to solve it :)
Ox87k
11. Apr 2007
i tried to protect some appz made by me (for tests) in C and asm but they didn't work. Why? I used your packer original and unpacked but same results. Is it normal?
cobrasniper555
12. Apr 2007
Now...do we upload a tutorial for the password to the source.zip? Or is it in the unpacked exe somewhere? Because I can't find it, anyhow, mucki, I've made an unpacking script in MASM, if you're interested.
cobrasniper555
12. Apr 2007
Nevermind, it's faulty.
mucki
Author
12. Apr 2007
Yes you are right, it's a bit buggy. The problem is that my unpacker is sometimes not allowed to execute this command:
mov byte ptr[esi],al
Does anyone what's wrong? I have no idea :(
deroko
12. Apr 2007
chage permissions on code section.
mucki
Author
12. Apr 2007
to get the protected programs work you have to enable the writable flag in the .text section. I will fix the protector soon.
zairon
Moderator
12. Apr 2007
[Crackme updated]
Ox87k
12. Apr 2007
well done but now the zip file isn't protected anymore! Mucki!!!! :)
mucki
Author
13. Apr 2007
Oh dear - I forgot. Sorry Ox87k.
hardcoder
15. Apr 2007
again, It's not working
mucki
Author
15. Apr 2007
@hardcoder: which application?
Nacho_dj
15. Apr 2007
Hello mucki:

I do not know which could be the reason, but after protecting a Delphi compiled target, it cannot be run.

When debugged, I find that the EP leads you to an area full of zeroes, in last section...
Is this a bug?

Anyway, thanks for your work!

Nacho_dj
mucki
Author
15. Apr 2007
I'm not sure but I guess the reason is that there is no space behind the last section.
(my protector doesn't create an own section, it only expands the last section for the decrypter code)
hardcoder
15. Apr 2007
exactly that could be the reason..
Hoping to get a fixed version.....
Nacho_dj
15. Apr 2007
Yep, it expands last section, but in this Delphi's case I have found that it only expands Virtual Size whilst Raw Size remains the same as before protecting the target.
Maybe this could be the reason of the zeroes there...

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.