downloadbrowsethehyper's HyperUnpackMe2

Download HyperUnpackMe2.zip, 102 kb (password: crackmes.de)
Browse contents of HyperUnpackMe2.zip

HyperUnpackMe2
++++++++++++++++

You must unpack a protected notepad executable

I have added some cool anti-debugging tricks :D

Will work only on Windows XP

Enjoy!

Difficulty: 5 - Professional problem to solve
Platform: Windows 2000/XP only
Language: C/C++

Published: 19. Jun, 2006
Downloads: 2827

Rating

Votes: 4
Crackme is good.

Rate this crackme:

Send a message to thehyper »

View profile of thehyper »

Solutions

Solution by Rolf.Rolles, published 19. aug, 2006; download (807 kb), password: crackmes.de or browse.

Rolf.Rolles has rated this crackme as quite nice.

Submit your solution »

Discussion and comments

Shism
06. Jun 2006
Umm the program crashes..... and I ran it normally. on xp sp1
Shism
07. Jun 2006
Ya it just crashes....
kao
08. Jun 2006
Crash confirmed on XP Pro SP1 English. Does not matter which is parent process - it just crashes.

Exception information
Code: 0xc0000005
Address: 0x01049B8B
acidflash
08. Jun 2006
Runs fine here, XP SP2 w/ up to date patches. (US/English)
TFB
09. Jun 2006
Crackme does not work on Windows XP SP2
megadoctor
18. Jun 2006
nope still crashes on my WinXp SP2 :(
thehyper
Author
18. Jun 2006
megadoctor,
what is the address of the exception and does it crash before or after or during the desktop switch?
thehyper
Author
19. Jun 2006
all bugs are fixed. it will run on all versions of xp. those who had the earlier hyperunpackme2 should download this file. i have removed the nasty bsod. if it still crashes, pls read the above comment. If you get 'system freeze', i hope that you can figure how to get out of it without restarting. HyperUnpackMe2 is not easy. first timers can check out the solutions to my first unpackme. Enjoy ;)
thehyper
Author
20. Jun 2006
I guess there is no one good enough to unpack HyperUnpackMe2!!! lol ;P
deroko
21. Jun 2006
I guess there is someone good enough to unpack it :P
but no solution this time, to lazy to write it :P check dumped file at arteam forum :P
FireBig
21. Jun 2006
it's so hard 2me...could u write something about it?please...
Shism
22. Jun 2006
Still crashes on my computer
thehyper
Author
23. Jun 2006
runs on sp2 only.
h0ard
24. Jun 2006
oh thats easy..

It´s got 2 MZ's so it are joined files ,not encrypted, have extracted in 10 minutez
EvOlUtIoN
01. Jul 2006
it seems to be very difficult... I have WinXP sp2 and the program works fine. But there is no way to open it or attach with any debugger, very strange! I think it opens another process with different protection settings, because before open the program wait a lot of time and does some strnge things...
deroko
02. Jul 2006
it doesn't open new process. little delay is caused by VM since whole protection goes trough virtual machine.
EvOlUtIoN
05. Jul 2006
OK thanks deroko! ;-) We wait for your solution!
Rolf.Rolles
29. Apr 2007
Instead of downloading my solution from here, you ought to get the one from http://www.openrce.org/articles/full_view/28. That one is re-written and it includes a section on coding processor modules, plus the full processor module source code.
zairon
Moderator
30. Apr 2007
Rolf.Rolles, can you upload the new solution here too?

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.