Jump to content
Tuts 4 You

[crackme] CrackMe (VMP)


Recommended Posts

Posted (edited)

If you successfully cracked it , then you will see this

vmpcrackme.png

Rules

Only patch or cracked EXE is allowed.

No keygen

No serial fish


/>http://www.multiupload.com/O7MR1DZ38N

Good luck .

CrackMe.rar

Edited by Teddy Rogers
Attached crackme to the topic as stated as a requirement in the forum rules...
Posted (edited)

find the download is a other remade?

now are the link, thnx

gretings Apuromafo

Edited by Apuromafo
Posted

part of the challenge lol

Posted

part of the challenge lol

Sorry :P

Posted

/>http://ifile.it/utbxk0l/Crackme%201.0_Patch.rar

Inline VMprotect with VM_nonsense code patch.

EDIT:

fixed link, stupid upload site.

Nice br0 , quosego :hug:

You zero'd the EAX after VbaStrCmp done . That's why you called it "nonsense" ? :^

Posted (edited)

The code I replaced was nonsense. Some esp-4 value change which had no effect on the hashkey/VM_code offset.

Shouldn't be to hard to edit the VM-code though to patch the jump. nice crackme.

Edited by quosego
  • Like 1
Posted

Shouldn't be to hard to edit the VM-code though to patch the jump. nice crackme.

That's what i expecting from everyone ,bro ;D .

i'm waiting :D

Posted

hehe well since you haven't made it necessary. A cracker will always take the easy way. :)

  • Like 1
Posted

The [crackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

Posted

Jerry, please attach all crackme's to your topic and please follow the topic title format. Thank you... :thumbs:

Ted.

  • 14 years later...
Posted

Seems bit old but decided to tackle this one as well. 

Sections :

Address=00400000
Size=00001000
Party=User
Page Information=crackme.exe
Allocation Type=IMG
Current Protection=-R---
Allocation Protection=ERWC-
Address=00401000
Size=0001F000
Party=User
Page Information=".text"
Allocation Type=IMG
Current Protection=ER---
Allocation Protection=ERWC-
Address=00420000
Size=00001000
Party=User
Page Information=".data"
Allocation Type=IMG
Current Protection=-RW--
Allocation Protection=ERWC-
Address=00421000
Size=00001000
Party=User
Page Information=".rsrc"
Allocation Type=IMG
Current Protection=-R---
Allocation Protection=ERWC-
Address=00422000
Size=00074000
Party=User
Page Information=".vmp0"
Allocation Type=IMG
Current Protection=ER---
Allocation Protection=ERWC-
Address=00496000
Size=00087000
Party=User
Page Information=".vmp1"
Allocation Type=IMG
Current Protection=ERW--
Allocation Protection=ERWC-

A good place to patch to accept random creds ->

0046B02B | E9 E83EFBFF              | jmp <crackme.sub_41EF18>                |

Valid combination ->

Spoiler

Username : iced / Your key : 654532826019-5


They are located in -> 

Address=00422000
Size=00074000
Party=User
Page Information=".vmp0"
Allocation Type=IMG
Current Protection=ER---
Allocation Protection=ERWC-

 

Capture.PNG

  • Like 3

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...