Log in

View Full Version : To solve crackme without using debugger.


ZaiRoN
January 5th, 2003, 19:52
Hi All!
The first project of the 2oo3...WoW!

Sometimes, in particular when I'm approaching a new target, I like to take confindence with it looking at the dead list; solving a problem only using a debugger is often possible. But of course, is not always so easy, especially when the routine we are studying has been written to make us confused or when there are many jumps and many controls.
In this case, it's convenient to use IDA because it has an internal interesting tool that can help us to put all the things in order, the tool is WinGraph32 and it can show you the flow of the code inside a simple block diagram.

To use this tool is very simple, the only thing you need to do is to put the cursor on an instruction and hit F12; in this way, you'll see the flow chart (instruction-by-instruction) of the code near the instruction. There is another option that can be activated using CTRL-F12 combination; this feature is quite different from the other because it shows you the flow chart call-by-call.

As you have already understood, the purpose of this project is to solve the crackme without debugger. In this way we will increase our experience in walking through the dead list only and of course, using wingraph too.
Obviously, I suggest IDA but if you want, you can do the job using Windasm, it's a little bit hard!!! If you are in trouble or if you don't understand some instructions, feel free to ask everything.

The crackme is not so difficult (not packed, written in assembly, no hidden code (!?! )). Look at the tip in the attached file and at the name of the crackme...you have to pay attention when you will move through the various states
The crackme has been written by Basse and you can find it in the Biw-Reversing home page: http://biw.rult.at/
Take a look at this group site, it's quite interesting and contains lots of crackmes to practice with :-)

Good luck mates!

ciao,
ZaiRoN