ConfuserEX v1.0 modded

[leopardu3u3]

Difficulty : 4
Language : .net
Platform : Windows
OS Version : ALL
Packer / Protector : ConfuserEx Modded

Description :

Unpack this modified version of confuserEX and tell us how you did it

P/S Antivirus might detect it as malware but it's normal just because of the obfuscation

Screenshot : 

UnPackMe.exe

[Reza-HNA]

just use dnSpy and CodeCracker tools .

UnpackMe-DeObfuscated.exe

Edited April 7, 2017 by Reza-HNA
add img

[leopardu3u3]

On 2017-04-07 at 4:08 PM, Reza-HNA said:

just use dnSpy and CodeCracker tools .

UnpackMe-DeObfuscated.exe

i tried following this tut 

but i have a problem at 2:36 where i can't find gchandle and my file is filled with ICSharpCode.Decompiler.DecompilerException: Error decompiling System.Void <Module>::AMAMODﬤﬢﬔﬣײַ㐔㐐ﬡﬓ㐓ﬕﬔ㐒ﬔﬣ㐒ﬣ㐓㐓㐑ﬣﬓﬔﬣ㐒㐔㐐ﬕ㐒㐑ﬖﬥﬢ㐑ﬥﬤﬥ㐔ײַ㐒KmoxPpxyyatKdwgJuRPOaDtoyWVOn9EZi>G31r$9IVM/h47A's8`9(System.Array,System.Int32,System.Int32)

 

[微不足道]

This is my result

UnpackMe-ok.exe

[deztroyr1]

On ‎1‎-‎12‎-‎2017 at 9:52 AM, 淡淡幽香 said:

This is my result

UnpackMe-ok.exe

 

My solution seems to be almost the same as the person above. my solution is not executable but the solution of 淡淡幽香 is executable.

Could anyone tell me what I did wrong? I have to fix entry point or what?

Thanks for any pointers.

UnPackMe-hmm.exe

 

Ok nevermind I fixed it by adjusting the entry point lol.

 

UnPackMe-hmm1.exe

Edited March 1, 2018 by deztroyr1