downloadbrowsepnluck's Crackme x64

Download Crackme94.zip, 25 kb (password: crackmes.de)
Browse contents of Crackme94.zip

This is a simple crackme for win64. You must find the correct serial, patch is not allowed

Difficulty: 2 - Needs a little brain (or luck)
Platform: Windows
Language: C/C++

Published: 05. Jul, 2008
Downloads: 493

Rating

Waiting for at least 3 votes
(we have only 1).

Rate this crackme:

Send a message to pnluck »

View profile of pnluck »

Solutions

Solution by Ox87k, published 11. jul, 2008; download (3587 kb), password: crackmes.de or browse.

Ox87k has not rated this crackme yet.

Solution by TiGa, published 11. jul, 2008; download (2277 kb), password: crackmes.de or browse.

TiGa has not rated this crackme yet.

Submit your solution »

Discussion and comments

TiGa
05. Jul 2008
Solved! Really nice and simple crackme!
It's a good one to try x64 for the first time.
Ox87k
05. Jul 2008
Hum.. TiGa, can you make a video tutorial?
I would learn something more about x64
TiGa
05. Jul 2008
Sure, I'm waiting 2-3 days to give a chance to somebody else .
Ox87k
06. Jul 2008
TiGa.. but have you some problem with IDA or nothing?
I've problems with breakpoints.. :-|
TiGa
06. Jul 2008
I used IDA 5.3 BETA instead of 5.2. ;)
pnluck
Author
06. Jul 2008
I reversed it with WinDBG & IDA 4.9 :p (watching the source code hihihi)
Ox87k
07. Jul 2008
Solved! Tiga, i'll do a video-tutorial if you didn't make it already. Is it ok for you?
TiGa
09. Jul 2008
Send yours in whenever it's ready.
MACH4
11. Jul 2008
Tnks, two excellent tutes guy's!
Couple of questions;

Why didn't the program detect winDebug?

@Tiga, The power of IDA never fails to amaze me when used in the right hands, yet using it seems more criptic than the program being debugged! How do you rate winDebug with IDA? ie advantages disadvantages?

sorry for being slightly off topic!
pnluck
Author
11. Jul 2008
@MACH4: "Why didn't the program detect winDebug?"
I didn't write code to detect ida or another one debugger, ida craches when try to debug this crackme, just because can't read, maybe, in the right way, exe files generated by visual studio 8.
TiGa
11. Jul 2008
The anti-debug trick prevents WinDbg from starting the file directly too, that's why 0x87k attached to the process after the anti-debug was executed. If the trick had also been present in the code of the button too, attaching would have been useless.

In mine, I took the long way around to explore and neutralize the anti-debug trick. I could have attached IDA in the same way as WinDbg to bypass it instead.

IDA 5.2 crashing is not really caused by any anti-debug trick, it's simply an unrelated bug in IDA. The bug was fixed in 5.3.

I prefer IDA because of the graphical view.
WinDbg is a ring 0 debugger but I don't really need that feature and the interface is command-line only.
I don't use OllyDbg either, always IDA.
MACH4
12. Jul 2008
Thanks for the explanations , Much appreciated!

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.