[unpackme] Babel .NET

[CodeExplorer]

 [unpackme] Babel .NET

First time we force de4dot.exe to unknown packer (else de4dot.exe will crash):

de4dot.exe C:\Crackme.exe -p un

 

Strings can be decrypted with StringDecryptor:

http://forum.tuts4you.com/topic/31329-stringdecryptor/

 

Delegates and int values still left to be restore!

 

Crackme.zip

[kao]

Something like this? 

 

EDIT: @CodeCracker: which version of Babel is that? I'd like to test my code a bit more before suggesting patch for de4dot.

Crackme-cleaned-kao.zip

Edited March 14, 2013 by kao

[CodeExplorer]

@kao:

I don't know which version of Babel it is (is not created by me)!

After decrypting ints de4dot.exe deobfuscate the switch!

So I don't think is needed any patch for de4dot.

Edited March 15, 2013 by CodeCracker