Difficulty : 3,5
Language : C#
Platform : Windows
OS Version : All
Packer / Protector : ConfuserEX 1.0 Modified

Description :

I am testing an anti de4dot and others ...
If possible I would like to know the process you have done.

Screenshot :

Holly shit.exe

I am a beginner of reversing like as you.

I wanna ask you. What is special point of you file than the origin version of ConfuserEx.

Your file can be very easy deobfuscated. And there are many tutorials similar with it.

You can find many articles and videos on here and  YOUTUBE by searching words "confuserex unpack".

I uploaded the deobfuscated file. It just only take 5 mins.  Currently it doesn't run, but I think it's full enough to analysis original code. 

Deob.exe

Thank you... I tryning to make any mod

All right

Edited November 11, 20177 yr by NightBullet

11 minutes ago, NightBullet said:

Thank you... I trying to make any mod

 

I've made several changes since then. File Update:

Holly shit.exe

What kind of changes did you apply?

Renamed only "koi" to "abo", or beside it, still any other changes?

Too easy!!!

This is not challenge, I think Challenge problems at least must be a little hard to study.

Deob2.exe

koi2_patched-strings-cleaned.exe

no deobfuscate

Holly shit-OK.exe

Unpacked.

Picture:

 

Unpack Download:

Holly shit-1 - Unpack.exe

Steps :

1. manually removed compressor

2. manually removed anti tampering

3. used CounfuserEx unpacker

4. used de4dot

unpacked.exe

does it have a virus?