Jump to content
Tuts 4 You

ConfuserEx Modified by Myself / EnigmaProtector


gholam.illidan
Go to solution Solved by YuqseLx,

Recommended Posts

gholam.illidan

Difficulty : 8/10
Language : C#
Platform : Windows
OS Version : All (Requires .net 4.0)
Packer / Protector : ConfuserEx Modified by Myself / EnigmaProtector 3.10

Description :

Unpack the file, get the string code, clean resources and keep the application working.

and make a Short Tut for it.

Screenshot :

UnpackMe.jpg

UnpackMe_protected.exe

Edited by gholam.illidan
Link to comment
  • Solution

Thanks for challange. I don't have time for tutorial but i can say what i do. First it's unpacked file and dll with resource.

http://www1.zippyshare.com/v/4m9Bvvn7/file.html

And that's ss for valid string.

http://prntscr.com/bn8fxm

I load main exe to olly and run it. It was giving error "Unable to find runtime...." but not it doesn't matter and i use when it's giving that error MegaDumper and dump exe. It's confuserex 0.6 now. ( or try giv script for enigma v4.xx)

Only use ConfuserExSwitchKiller, ConfuserEx Proxy Call Fixer v2 by DaviCore and ConfuserExStrings by yq8 and delete all call in .cctor and delete unused members. After use de4dot and it's unpacked succesfully. But it's not run correctly because it's need dll with decrypted resources. For this i debug with dnspy a orijinal confuserex file and bp when antitamper finish. Run and see module tab you have .dll file and save that.

If my English not good sorry about that. If i do any wrong or not good say me thank you again.

Best regards.

Edited by YuqseLx
  • Like 7
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...