juansacco's DragonCrack

Author:
juansacco

Language:
C/C++

Upload:
2019-07-18 11:07

Download

Platform:
Windows

Difficulty:
2.0

Quality:
4.0

Arch:
x86

Downloads:
11

Size:
517.50 KB

Writeups:
0

Comments:
6

Description

DragonCrack a C++ Crackme with an RPG_Style story-line. You have to escape the dungeon and retrieve the key. There is a Dragon in the dungeon that fights back by casting spells upon you ( anti-debugging techniques ) there is a twist at the end and you will discover that the key was always you knew already. Hope you like it!

Comments (6)
Writeups (0)

You must be logged in to post a comment

chevyopala on 2019-07-26 14:07: Password?

juansacco on 2019-07-30 08:04: zip password: crackmes.one

unc4nny on 2019-08-11 17:18: Nice one, when i saw your program loading the name of my computer i thought you was bamboozling me into sum malware weird shit lol. That was really funny. But, can you tell me what VMDetection() means and what it was doing? I kinda had to hardcore get through it lol

juansacco on 2019-08-12 08:51: @unc4nny Here is the VM detection for VMWare used on this crackme: All the protections on this crackme were implemented in a way that could be bypassed by setting as in example in IDA something like: SetRegValue("ZF,0x1/0x0) __try { __asm { push edx push ecx push ebx mov eax, 'VMXh' mov ebx, 0 // any value but not the MAGIC VALUE mov ecx, 10 // get VMWare version mov edx, 'VX' // port number in eax, dx // read port // on return EAX returns the VERSION cmp ebx, 'VMXh' // is it a reply from VMWare? setz[rc] // set return value pop ebx pop ecx pop edx } }

k3eloxx on 2019-11-26 08:30: is it possible to bypass vm detection in a vm without patching?

l0Zich on 2020-01-01 14:33: does editing registries and flags count as patching?

You must be logged in to submit a writeup