Jump to content
Tuts 4 You

[crackme] .NET CrackMe


Recommended Posts

Posted

try to crack this file make it say success also show the deobfuscated code 

CrackMe.exe

Posted

The [crackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

Posted

Cawk, it would seem you have an inability to follow the rules of this forum, looking at this topic and others you have started. If you are unable to follow and adhere to the forum rules please refrain from starting any further topics in this forum and send me a private message explaining why this is so.

Further new topics that do not adhere to the forum rules will be trashed...

Ted.

Posted (edited)

Protected by ConfuserEx (and SmartAssembly string found but unsure if it is not fake!)
My old tricks/tools still work!
For the one intersted check:
https://forum.tuts4you.com/topic/30970-unpacking-confuser
https://forum.tuts4you.com/topic/35897-confuserex-v012-unpacker
https://forum.tuts4you.com/topic/36239-confuserex/


Unpacked file here:
http://www37.zippyshare.com/v/3BNvZCdA/file.html

Edited by CodeCracker
  • Like 4
Posted

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

  • Like 2
Posted
2 hours ago, CodeCracker said:

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

There is no SmartAssembly, it's a fake attribute. It's Confuserex + DotNetPatcher 

  • Like 1
Posted
3 hours ago, CodeCracker said:

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

good job 

thanks for doing it

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...