Jump to content
Tuts 4 You

Edit History

cachito

cachito


Add result

For unpacking

1) cawk unpacker
2) dump after decryption
3) fix EP
4) Proxy call fixer by Davicore
5) Strings decryptor by CC
6) Switch killer by CC
7) Dump resources (empty)
😎 Clean cctor and <module>methods

(maybe 4, 5 and 6 can be replaced by cawk unpacker again)

I will check the key algo tomorrow, don't have time now.

a29p-EP-anti2_noproxy_stringdec-cleaned_deobfuscated-res2-cctor-module.exe

 

--------------------------------------------------------

 

Username = "Usuario"

Code = "161308"

int length = username.length();
int num2 = length + 2 - 4 + 40 + 10;
return Convert.ToString(419 * num2 * length - length);

 

---------------------------------------------------

 

EDIT2: I have received a few PMs asking how to fix EP, so I will post the videos I used as reference here. Following this 2 videos you should be able to unpack confuserex fully.

 

 

cachito

cachito


Add result

For unpacking

1) cawk unpacker
2) dump after decryption
3) fix EP
4) Proxy call fixer by Davicore
5) Strings decryptor by CC
6) Switch killer by CC
7) Dump resources (empty)
😎 Clean cctor and <module>methods

(maybe 4, 5 and 6 can be replaced by cawk unpacker again)

I will check the key algo tomorrow, don't have time now.

a29p-EP-anti2_noproxy_stringdec-cleaned_deobfuscated-res2-cctor-module.exe

 

--------------------------------------------------------

 

Username = "Usuario"

Code = "161308"

int length = username.length();
int num2 = length + 2 - 4 + 40 + 10;
return Convert.ToString(419 * num2 * length - length);

 

cachito

cachito


Add result

For unpacking

1) cawk unpacker
2) dump after decryption
3) fix EP
4) Proxy call fixer by Davicore
5) Strings decryptor by CC
6) Switch killer by CC
7) Dump resources (empty)
😎 Clean cctor and <module>methods

(maybe 4, 5 and 6 can be replaced by cawk unpacker again)

I will check the key algo tomorrow, don't have time now.

a29p-EP-anti2_noproxy_stringdec-cleaned_deobfuscated-res2-cctor-module.exe

 

--------------------------------------------------------

 

Username = "Usuario"

Code = "161308"

int length = username.length;
int num2 = length + 2 - 4 + 40 + 10;
return Convert.ToString(419 * num2 * length - length);

 

cachito

cachito

For unpacking

1) cawk unpacker
2) dump after decryption
3) fix EP
4) Proxy call fixer by Davicore
5) Strings decryptor by CC
6) Switch killer by CC
7) Dump resources (empty)
😎 Clean cctor and <module>methods

(maybe 4, 5 and 6 can be replaced by cawk unpacker again)

I will check the key algo tomorrow, don't have time now.

a29p-EP-anti2_noproxy_stringdec-cleaned_deobfuscated-res2-cctor-module.exe

×
×
  • Create New...