Jump to content
Tuts 4 You

[crackme] .NET CrackMe


cawk

Recommended Posts

The [crackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

Link to comment
Share on other sites

Cawk, it would seem you have an inability to follow the rules of this forum, looking at this topic and others you have started. If you are unable to follow and adhere to the forum rules please refrain from starting any further topics in this forum and send me a private message explaining why this is so.

Further new topics that do not adhere to the forum rules will be trashed...

Ted.

Link to comment
Share on other sites

Protected by ConfuserEx (and SmartAssembly string found but unsure if it is not fake!)
My old tricks/tools still work!
For the one intersted check:
https://forum.tuts4you.com/topic/30970-unpacking-confuser
https://forum.tuts4you.com/topic/35897-confuserex-v012-unpacker
https://forum.tuts4you.com/topic/36239-confuserex/


Unpacked file here:
http://www37.zippyshare.com/v/3BNvZCdA/file.html

Edited by CodeCracker
  • Like 4
Link to comment
Share on other sites

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

  • Like 2
Link to comment
Share on other sites

2 hours ago, CodeCracker said:

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

There is no SmartAssembly, it's a fake attribute. It's Confuserex + DotNetPatcher 

  • Like 1
Link to comment
Share on other sites

3 hours ago, CodeCracker said:

    L_00ed: ldstr "ample" // 72d61a0070
    L_00f2: stloc.1  // 0b
    L_00f3: ldc.i4 -841782355 // 20ad6bd3cd
    L_00f8: br.s L_012b // 2b31
    L_00fa: nop  // 00
    L_00fb: nop  // 00
    L_00fc: nop  // 00
    L_00fd: nop  // 00
    L_00fe: nop  // 00
    L_00ff: nop  // 00
    L_0100: nop  // 00
    L_0101: nop  // 00
    L_0102: nop  // 00
    L_0103: nop  // 00
    L_0104: ldstr "Exx" // 72e21a0070
    L_0109: stloc.0  // 0a
    L_010a: ldc.i4 -2031618656 // 20a0f5e786
    L_010f: br.s L_012b // 2b1a


Login:
Exx
ample

String decrypted file:
http://www4.zippyshare.com/v/3X6VP9Dx/file.html

good job 

thanks for doing it

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...