Cheat Engine

opcode0x90 · Cheater Reputation: 0 Joined: 05 Aug 2006 Posts: 27

My first crackme. You are allowed to patch it. Wink

If you done so, submit a copy of patched crackme as proof.

Have phun.

Note: You have to key in the code in one pass. If you backspace it will considered as wrong. This was a bug, but I am too lazy to fix it. Razz

Anyway it wont mess up with the final outcome.

DeletedUser14087 · Posted: Tue Mar 06, 2007 10:11 am Post subject:

lol,lets give it a try =]

nix · Posted: Tue Mar 06, 2007 10:12 am Post subject:

casper the unfriendly ghost giving a try ?

SunBeam · Posted: Tue Mar 06, 2007 10:45 am Post subject:

Themida.

appalsap · Posted: Tue Mar 06, 2007 10:48 am Post subject:

And once a crackme is packed it loses its crackme title and becomes an unpackme.

Uligor · Posted: Tue Mar 06, 2007 11:09 am Post subject:

Done.

EDIT: You might need to refresh if you don't see anything.

Nice encryption keys btw. ;x (The allocated memory ones, not the looping overlapping XOR >=()

compactwater · Posted: Tue Mar 06, 2007 11:23 am Post subject:

Dang, didn't even get as chance....

EDIT:
Grammar plz?
"You have Enter the code wrong" Laughing

SunBeam · Posted: Tue Mar 06, 2007 11:41 am Post subject:

Good job, Uli Wink

I'm still battling its unpacking, rather than reversing in-code Smile

ottoshafer · Cheater Reputation: 0 Joined: 22 Oct 2006 Posts: 47

what do you guys use to look at the exe file? Sorry for asking such a stupid question, but i want to learn and knowing what tools to use helps alot :S.

SunBeam · Posted: Tue Mar 06, 2007 12:53 pm Post subject:

@Opcode0x90: Me and Uligor are arguing on whether you used any protection on the file. To me it looked like Themida, based on file structure and allocations :S Ploks, tell us...

opcode0x90 · Cheater Reputation: 0 Joined: 05 Aug 2006 Posts: 27

@Uligor: Obvious eh? Protection is nothing without enforcement Wink

@appalsap: Its not packed. Not in any sense of encryption or compression.

@Sunbeam: I "borrowed" that trick from Themida. Razz

But I didnt protect it using Themida, if thats what you meant.

Anyone willing to reverse the eval function to get the code? Razz

---------------------------------------------------------------------------------------

Update 04/09/2007:

Full solution by alex_ls, finally. Wink

Ignore the false alarm by your AV.