Jump to content
Tuts 4 You

Edit History

TobitoFatito

TobitoFatito


Replaced links with images

Alright, it was really easy to remove :D

Opening the .exe on Dnspy we can see that the methods have some kind of decompiler crashing.

spacer.png

So what i did was simply loading the .exe and writing each instruction to console to see what is going on.

Well a lot of ldc.i4.6 appeared as you can see here spacer.png

Simply made a quick tool to remove this

 spacer.png

Now you can open it on dnspy and see the actual code. But there are some anti-debuggers so i

modified the tool that i made to remove the antidebuggers too. like this spacer.png

You can simply debug it now :D

spacer.png

 

 

 

CrackMe (1)-Cleaned.exe

TobitoFatito

TobitoFatito

Alright, it was really easy to remove :D

Opening the .exe on Dnspy we can see that the methods have some kind of decompiler crashing.

https://i.imgur.com/zqZ8uXt.png

So what i did was simply loading the .exe and writing each instruction to console to see what is going on.

Well a lot of ldc.i4.6 appeared as you can see here https://i.imgur.com/FLyR0Pv.png

Simply made a quick tool to remove this https://i.imgur.com/LHLvk4G.png

Now you can open it on dnspy and see the actual code. But there are some anti-debuggers so i

modified the tool that i made to remove the antidebuggers too. like this https://i.imgur.com/nW4Xjly.png

You can simply debug it now :D 

https://i.imgur.com/PpWlLdE.png

 

 

 

CrackMe (1)-Cleaned.exe

×
×
  • Create New...