downloadbrowseOrCs236's OrCs236 Crackme

Download crackme.zip, 362 kb (password: crackmes.de)
Browse contents of crackme.zip

This is my first attempt at a crackme, so please be kind.

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows 2000/XP only
Language: Unspecified/other

Published: 26. Oct, 2005
Downloads: 1180

Rating

No votes yet.
Rate this crackme:

Send a message to OrCs236 »

View profile of OrCs236 »

Solutions

Solution by Game.Over, published 13. nov, 2005; download (569 kb), password: crackmes.de or browse.

Game.Over has not rated this crackme yet.

Submit your solution »

Discussion and comments

r0bert
26. Oct 2005
Im getting "AutoIt Error","Unable to open the script file" when i unpack the crackme... is that part of the crackme or ?
bigboss1988
26. Oct 2005
hi

i think it's not for newbies!!
bigboss1988
26. Oct 2005
r0bert,

try to make MUP this way very easy better than script
and learn something new ;)

i know OEP
0043F2F8 55 PUSH EBP

but i can't fix IAT!

also..
when press F9 to run crackme the olly colse!!
the better way to slove this problem change ollydbg.exe
for anything like.."olldbg.exe"

tha's all :)
bigboss1988
26. Oct 2005
why u used winsock?!!!
OrCs236
Author
26. Oct 2005
I didn't use winsock, but the scripting language I used includes it in case I use a function that needs it.
gryzon
30. Oct 2005
Nice crackme :) Especially _SelfDestruct() and doom.bat :)
gryzon
30. Oct 2005
I think we should see temp directory and copy some file somewhere and change it to exe :) The author give us a big hint (source code), just put some break on access at 0043648d in new exe and see what eax tells us :)
But I'm too newb without skills :)

@bigboss1988
just look at this:

If WinExists("OllyDbg") Then WinClose ("OllyDbg")
_SelfDestruct()
ElseIf ProcessExists("OllyDbg.exe") Then ProcessClose("OllyDbg.exe")
_SelfDestruct()

:)
r0bert
30. Oct 2005
OrCs236,

whats tripping me up is:

$SERIAL = StringTrimLeft($SERIAL, $ELLO - 60)

........
its trimming a 12 digit serial by (12-60) chars !
OrCs236
Author
30. Oct 2005
I knew autoit was too easy to crack... If you have the source how hard could a keygen be?
Lesco
31. Oct 2005
how can your serial be only 12 chars long? it's the serial _after_ encryption
jB_
31. Oct 2005
OrCs236 : Once you have the source it is very easy to code a keygen. Check my website ( http://jardinezchezjb.free.fr )
Regards, it was easy but interesting. I didn't know this tool.

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.