JustinOOO Posted April 9, 2018 Posted April 9, 2018 Difficulty : 5 (?) Language : C# (.NET) Platform : Windows OS Version : Windows 7+ Packer / Protector : EazFuscator v2018.1 Description : When pressing the "go" button some unknown function takes text from the input box and converts it to something to put in the output box. Your goal is to unpack the program and provide me with the source code to that function. Screenshot : unpack-me.exe
Abigor Posted April 26, 2018 Posted April 26, 2018 private void btnGo_Click(object sender, EventArgs e) { this.txtOutput.Text = main.smethod_0(this.txtInput.Text); } private static string smethod_0(string string_0) { byte[] bytes = Encoding.UTF8.GetBytes("5myd2VTtPqB7dJ0i"); byte[] bytes2 = Encoding.UTF8.GetBytes(string_0); byte[] bytes3 = new PasswordDeriveBytes("uh oh... looks like i've been unpacked", null).GetBytes(32); ICryptoTransform transform = new RijndaelManaged { Mode = CipherMode.CBC }.CreateEncryptor(bytes3, bytes); MemoryStream memoryStream = new MemoryStream(); CryptoStream cryptoStream = new CryptoStream(memoryStream, transform, CryptoStreamMode.Write); cryptoStream.Write(bytes2, 0, bytes2.Length); cryptoStream.FlushFinalBlock(); byte[] inArray = memoryStream.ToArray(); memoryStream.Close(); cryptoStream.Close(); return new string(Convert.ToBase64String(inArray).ToArray<char>().Reverse<char>().ToArray<char>()).Replace("=", string.Empty); } unpack-me_.exe 3
demon_da Posted April 27, 2018 Posted April 27, 2018 Hi @JustinOOO Can you post another one but this Time also with Native Code VM for protecting that specific function?!
Kazura Posted May 1, 2018 Posted May 1, 2018 On 4/27/2018 at 5:30 PM, demon_da said: Hi @JustinOOO Can you post another one but this Time also with Native Code VM for protecting that specific function?! This one is protected with VM Already.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now