niko122's niko's vm final!! :)

Author:
niko122

Language:
C/C++

Upload:
2026-03-17 20:35

Download

Platform:
Windows

Difficulty:
2.8

Quality:
3.0

Arch:
x86-64

Downloads:
197

Size:
59.00 KB

Writeups:
0

Comments:
3

Description

super cool awesome zip password: crackmes.one if you manage to crack it post how you did it in the comments!!

Comments (3)
Writeups (0)

You must be logged in to post a comment

90th on 2026-03-18 17:15: [Click to reveal]

Biglsim04 on 2026-04-02 15:44: [Click to reveal]The exact comparison of character per caracter happens at 0x6092, i broke down all VM handlers which are these: .rdata:000000000000E320 funcs_140004731 dq offset LoadImmHandler32_4D30 .rdata:000000000000E320 ; DATA XREF: sub_3B10+16↑r .rdata:000000000000E320 ; VMDispatcher_3EA0+34↑o ... .rdata:000000000000E328 dq offset AddHandler_4E10 .rdata:000000000000E330 dq offset SubHandler_4E70 .rdata:000000000000E338 dq offset MultiplicationHandler_4ED0 .rdata:000000000000E340 dq offset DivisionHandler_4F30 .rdata:000000000000E348 dq offset DIVMODHAndler_4FB0 .rdata:000000000000E350 dq offset XorHandler_5030 .rdata:000000000000E358 dq offset AndHandler_5090 .rdata:000000000000E360 dq offset OrHandler_50F0 .rdata:000000000000E368 dq offset NotHandler_5150 .rdata:000000000000E370 dq offset ShiftLeftHandler_5180 .rdata:000000000000E378 dq offset ShiftRightHandler_51E0 .rdata:000000000000E380 dq offset MovHandler_4DB0 .rdata:000000000000E388 dq offset CMP_EQ_5240 .rdata:000000000000E390 dq offset JmpHandler_52A0 .rdata:000000000000E398 dq offset JmpIfFlag_52E0 .rdata:000000000000E3A0 dq offset JNZ_5320 .rdata:000000000000E3A8 dq offset PUSHIMM_5360 .rdata:000000000000E3B0 dq offset POP_IMM_53B0 .rdata:000000000000E3B8 dq offset Call_5410 .rdata:000000000000E3C0 dq offset Ret_5470 .rdata:000000000000E3C8 dq offset _guard_check_icall_nop .rdata:000000000000E3D0 dq offset PrintReg_54C0 .rdata:000000000000E3D8 dq offset PRINT_VM_55C0 .rdata:000000000000E3E0 dq offset ApiDispatcher_5870 .rdata:000000000000E3E8 dq offset sub_5890 .rdata:000000000000E3F0 dq offset MemcpyVM_5A10 .rdata:000000000000E3F8 dq offset VMERROR_54B0 .rdata:000000000000E400 dq offset StackChyper_5B00 .rdata:000000000000E408 dq offset ReadInputVM_5B40 .rdata:000000000000E410 dq offset RealCheckPasswordVM_5DA0 .rdata:000000000000E418 dq offset sub_5B20 but the only necessary is the RealCheckPasswordVM: and the password is: HELLO! - HELLO! - I HOPE YOU ENJOY THIS CRACK ME IT TOOK ME A WHILE - !@#$%^&*()_+-=, just put a bp on that address and annotate on notepad, could be better but its not that bad

Biglsim04 on 2026-04-02 15:53: [Click to reveal]

Show all spoilers

You must be logged in to submit a writeup