Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Featured Replies

Posted

Language : .NET
Platform : Windows
OS Version : x64
Packer / Protector : Phoenix + Beds + ILprotector + Enigma (ILprotector + Enigma + Beds = Paid + Newest Versions)

Description :
Let us know how it was done!

Sorry Mods For File Size (Enigma Seems To Increase The File Size No Matter What As Well As IlProtector I can Show Proof And Protect In front If Need Be)

Screenshot :

fdbkagz.png

 

Download File: Download

Unpack_Me.rar

Edited by Teddy Rogers

Please attach the file to your post and not an external host. Thank you...

Ted.

  • Author

I cannot attach it because it is a 0.90MB max file size, When using Enigma its VM it creates I imagine is why the file size increases by so much, ILProtect increases it as well due to the DLLs it requires at runtime.

  • 1 year later...

image.png.ff1c4a2f496c245767e663efd9f0d352.png

First i dumped file and enigma protector was removed 
Then i used ILProtector Unpacker by ElektroKill 
After i use constant decryptor made by cursedsheep and i was able to see the code :)

Edited by 0x59

  • 3 weeks later...

@0x59 how you opened dumper ?

@0x59I already removed the enigma layers, but the ILprotect layers give an error, can you help me?

error.png

image.png.fd56da5b78a5355faa9319d03ef64815.png

Modd it and error has ocurred on it 😕 

@0x59 is ILProtector Unpacker by ElektroKill, 

I removed the engima, but when using the ILProtector Unpacker by ElektroKill it does not work, could you share a video or tutorial on how to remove that ilprotect layer because the ElektroKill tool does not work for me

  • 3 weeks later...

 send me this tools please 

 

I will release an update for the tool which allows the skipping of metadata writing errors!

  • 1 year later...

image.png.1e6f1d21872c1e49bacc763453b2bccd.png

 

1-Run the file and dump it using ExtremeDumper.

2-Unpack the ILProtector using ElektroKill's ILPUnpacker (attached the fixed version bellow)

3-Remove junk attributes and decrypt strings.

 

My code to remove junk attributes and decrypt strings using dnlib:

	public static void RemoveAttributes(ModuleDef module)
        {
            foreach (var type in module.GetTypes())
            foreach (var method in type.Methods)
            foreach (var customAttribute in method.CustomAttributes.Where(customAttribute =>
                         customAttribute.TypeFullName != "System.STAThreadAttribute").ToList())
                method.CustomAttributes.Remove(customAttribute);
        }

        public static void DecryptStrings(ModuleDef module)
        {
            foreach (var type in module.GetTypes())
            foreach (var method in type.Methods.Where(x => x.HasBody && x.Body.HasInstructions))
                for (var i = 0; i < method.Body.Instructions.Count; i++)
                {
                    try
                    {

                        if (!method.Body.Instructions[i].OpCode.Equals(OpCodes.Call))
                            continue;
                        if (method.Body.Instructions[i].Operand is not MethodDef calledMethod)
                            continue;
                        if (calledMethod.DeclaringType.Name != "DefiningMethod")
                            continue;
                        if (!method.Body.Instructions[i - 1].OpCode.Equals(OpCodes.Ldstr))
                            continue;

                        var operand = Decrypt(method.Body.Instructions[i - 1].Operand.ToString());
                        method.Body.Instructions[i - 1].OpCode = OpCodes.Nop;
                        method.Body.Instructions[i].OpCode = OpCodes.Ldstr;
                        method.Body.Instructions[i].Operand = operand;
                    }
                    catch
                    {
                    }
                }
        }

        private static string Decrypt(string text)
        {
            var length = text.Length;
            var array = new char[length];
            for (var i = 0; i < array.Length; i++)
            {
                var c = text[i];
                var b = (byte)(c ^ (length - i));
                var b2 = (byte)(c >> 8 ^ i);
                array[i] = (char)((b2 << 8) | b);
            }

            return string.Intern(new string(array));
        }

 

Unpacked.exe ILPUnpack_NET4.5_FIX.zip

Edited by SychicBoy

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.