Jump to content
Tuts 4 You

ArmDot 2022.6.0


1 Screenshot

Unpack the exe to find the key! If you would give a brief explanation on how you unpacked it.

The exe has max protections and will pop up a messagebox once you enter the correct password.

Protections added to this: Hide String, Control Flow, Obfuscate Name, Obfuscate NameSpaces, Virtualize code.

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Linq;
using System.Runtime.InteropServices;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;

namespace Unpackme
{
    public partial class HKDSKJASKJAKSIUASKDJH : Form
    {
        public HKDSKJASKJAKSIUASKDJH()
        {
            InitializeComponent();            
        }


        public static string KJHASKDJHASKDH(byte[] SJAKDJAHSKD)
        {
            return Encoding.Default.GetString(SJAKDJAHSKD);
        }

        public static byte[] KJHASKDJHASKEH = { 105, 32, 99, 97, 110, 32, 114, 101, 115, 111, 108, 118, 101, 32, 116, 104, 105, 115, 32, 60, 62, 32, 61, 41 };

        private void button1_Click(object sender, EventArgs e)
        {

        }

        public static byte[] KJHASKJH8aslkjasdKJAHS8ASKJ(byte[] KAJHSDKJADKSH8AS7UDKA, byte KJHASKHJJHASHASJDKIJASDA, Boolean KJKAIUASIUASIDYAID8A7S)
        {
            byte[] KJAKSHDAS98DAUSKDJAKSDJAKSD;
            if (KJKAIUASIUASIDYAID8A7S)
            {
                KJAKSHDAS98DAUSKDJAKSDJAKSD = new byte[KAJHSDKJADKSH8AS7UDKA.Length + 1];
                KAJHSDKJADKSH8AS7UDKA.CopyTo(KJAKSHDAS98DAUSKDJAKSDJAKSD, 1);
                KJAKSHDAS98DAUSKDJAKSDJAKSD[0] = KJHASKHJJHASHASJDKIJASDA;
            }
            else
            {
                KJAKSHDAS98DAUSKDJAKSDJAKSD = new byte[KAJHSDKJADKSH8AS7UDKA.Length + 1];
                KAJHSDKJADKSH8AS7UDKA.CopyTo(KJAKSHDAS98DAUSKDJAKSDJAKSD, 0);
                KJAKSHDAS98DAUSKDJAKSDJAKSD[KAJHSDKJADKSH8AS7UDKA.Length] = KJHASKHJJHASHASJDKIJASDA;
            }
            return KJAKSHDAS98DAUSKDJAKSDJAKSD;
        }

        private void KAJSLDKASDASDJASJ(object sender, EventArgs e)
        {
            if (Debugger.IsAttached || Debugger.IsLogging())
            {
                KJHASKDJHASKEH = KJHASKJH8aslkjasdKJAHS8ASKJ(KJHASKDJHASKEH, 87, false);
            }
            else
            {
                KJHASKDJHASKEH = KJHASKJH8aslkjasdKJAHS8ASKJ(KJHASKDJHASKEH, 10, false);
            }
            if (KJHASDIUASDAKSDASLAKS.Text.Equals(KJHASKDJHASKDH(KJHASKDJHASKEH) + "."))
            {
                IntPtr hwnd = Nativecs.HKAJSHDKASHDIAUSJDNASDN();
                NativeMethods.MessageBox(hwnd, "Congratulation, you are the best", "", 0);
            }
            else
            {
                IntPtr hwnd = Nativecs.HKAJSHDKASHDIAUSJDNASDN();
                NativeMethods.MessageBox(hwnd, "PASSWORD INCORRECT", "", 0);
            }
        }
    }

}

none


User Feedback

Recommended Comments

There are no comments to display.

×
×
  • Create New...