Jump to content
Tuts 4 You

2 Screenshots

Your goal is to devirtualize and unpack the file completely;

  • No partial unpack,
  • No patching.
using System;
using System.ComponentModel;
using System.Drawing;
using System.Windows.Forms;
using BlackHatAnonymous.Properties;

namespace BlackHatAnonymous
{
    // Token: 0x02000002 RID: 2
    public class BlackHat : Form
    {
        // Token: 0x06000001 RID: 1 RVA: 0x00002050 File Offset: 0x00000250
        public BlackHat()
        {
            this.InitializeComponent();
        }

        // Token: 0x06000002 RID: 2 RVA: 0x00002068 File Offset: 0x00000268
        private void button1_Click(object sender, EventArgs e)
        {
            MessageBox.Show("Hi, Your Job is to Unpack this File and Change this Message.\r\n\r\nDo Your Best to Unpack It.", "Change Me Please", MessageBoxButtons.OK);
        }

        // Token: 0x06000003 RID: 3 RVA: 0x0000207C File Offset: 0x0000027C
        protected override void Dispose(bool disposing)
        {
            bool flag = disposing && this.components != null;
            if (flag)
            {
                this.components.Dispose();
            }
            base.Dispose(disposing);
        }

        // Token: 0x06000004 RID: 4 RVA: 0x000020B4 File Offset: 0x000002B4
        private void InitializeComponent()
        {
            ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof(BlackHat));
            this.button1 = new Button();
            base.SuspendLayout();
            this.button1.BackColor = SystemColors.MenuHighlight;
            this.button1.FlatAppearance.BorderColor = Color.White;
            this.button1.FlatAppearance.BorderSize = 2;
            this.button1.FlatStyle = FlatStyle.Flat;
            this.button1.Font = new Font("Calibri", 20.25f, FontStyle.Bold, GraphicsUnit.Point, 0);
            this.button1.ForeColor = SystemColors.ButtonFace;
            this.button1.Location = new Point(29, 471);
            this.button1.Name = "button1";
            this.button1.Size = new Size(312, 74);
            this.button1.TabIndex = 0;
            this.button1.Text = "CHANGE MY MESSAGE";
            this.button1.UseVisualStyleBackColor = false;
            this.button1.Click += this.button1_Click;
            base.AutoScaleDimensions = new SizeF(6f, 13f);
            base.AutoScaleMode = AutoScaleMode.Font;
            this.BackgroundImage = Resources.black;
            this.BackgroundImageLayout = ImageLayout.Stretch;
            base.ClientSize = new Size(378, 573);
            base.Controls.Add(this.button1);
            base.FormBorderStyle = FormBorderStyle.Fixed3D;
            base.Icon = (Icon)componentResourceManager.GetObject("$this.Icon");
            base.MaximizeBox = false;
            base.Name = "BlackHat";
            this.Text = "BlackHat - Unpack Me";
            base.ResumeLayout(false);
        }

        // Token: 0x04000001 RID: 1
        private IContainer components = null;

        // Token: 0x04000002 RID: 2
        private Button button1;
    }
}

It is using the latest version of the commercial protector ArmDot Packer 2022.1.0 including VM. No personal modifications.


User Feedback

Recommended Comments

There are no comments to display.

×
×
  • Create New...