jochen_'s ReverseMe3

Author:
jochen_

Language:
Assembler

Upload:
2020-11-15 17:23

Download

Platform:
Windows

Difficulty:
4.0

Quality:
4.2

Arch:
x86-64

Downloads:
14

Size:
2.50 KB

Writeups:
2

Comments:
6

Description

When not running under a debugger it shows a MessageBox saying "Everythings seems fine (^_^)..No debugger Detected !!" Your objective is to make the MessageBox show even when running under a Debugger. You can patch the file if you can show in the end how you found the solution with a simple write up on how you did it. The ReverseMe only runs on the 3 latest builds of Windows 10. 1909 2004 and 20H2. The ReverseMe was coded to NOT run under a VM !! If you want to use a VM, you'll have to bypass one more extra check :)

Comments (6)
Writeups (2)

You must be logged in to post a comment

DARKCODER on 2020-11-19 13:59: Crackme didn't work. Error on command 'cmpsd' - EXCEPTION_ACCESS_VIOLATION. Win10, 64

jochen_ on 2020-11-20 12:49: That's because of the debugger ! It doesn't run in aVM either

jeffli6789 on 2020-11-21 04:23: This is a GREAT challenge! I will make a writeup for it

x0r19x91 on 2020-12-01 03:05: Great Challenge!

RCEwithPeter on 2021-12-22 14:45: Sadly, the crackme doesn't show any message box; even when not in a VM and not having a debugger active. Windows 10 2004 (19041.1348).

jochen_ on 2021-12-29 13:20: Maybe it's because of your AV ? None else had any problems with it ..

You must be logged in to submit a writeup

Solution by 0x22 on 2020-11-22 17:08:
Heres a simple writup on how i solved this with my big ass nop hammer :) Thanks again for creating this Jochen_, appreciated.

Download

Solution by misra.cxx on 2022-12-09 14:06:
Nice challenge, learned a lot by solving this one :-)

Download

crackmes.one

crackmes.one

jochen_'s ReverseMe3