downloadbrowsebpx_'s Bustme #4

Download, 13 kb (password:
Browse contents of

Unpack it and find a serial.
To find a serial, you may have to think like a hacker =)

Difficulty: 5 - Professional problem to solve
Platform: Windows
Language: Assembler

Published: 04. Dec, 2006
Downloads: 631


Waiting for at least 3 votes
(we have only 2).

Rate this crackme:

Send a message to bpx_ »

View profile of bpx_ »


Solution by deroko, published 06. jan, 2007; download (9 kb), password: or browse.

deroko has rated this crackme as quite nice.

Submit your solution »

Discussion and comments

04. Dec 2006
Nice to see you again, It is good to check CC on TLS callback, I successfully Separeted child from parent but obfucation of code in child gets me to the hell... I don't know what to do next, waiting for someone to write a good tutorial....
@ deroko , common you gonna do it :-)
04. Dec 2006
ahh, school has been keeping me busy =)
Good luck with this one guys!
05. Dec 2006
strange, i have never seen something like this before... 8)
05. Dec 2006
How? Trick that he uses at the start is same as ExeCryptor use ;)

It is very simple to remove TLS trick, also exception trick. Crackme doesn't have checksums so you can patch some stuf. Obfuscation is rather easy to remove.
05. Dec 2006
Pretty nice collection of tricks. For newbie this will be quite a challenge, for an experienced guy - toy for a coffee break.. :)
13. Dec 2006
Really a nice crackme. I managed to find a serial.(the hint "To find a serial, you may have to think like a hacker =)" is very useful!!)
However, I have not been learning unpacking so can some one give some hints to remove the junkcodes? I mean something like this:
xor eax,ecx
xor eax,ecx
There are so many, so what should do for analysis' convenience? Do i have to patch them to nops?
05. Jan 2007
hehe nice, didn't know that this one is up :) not that hard imho :) will write solution.

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.