Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > File Unpacking
Reload this Page what tool crypt this C# code
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 08-01-2011, 10:44 AM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default what tool crypt this C# code
what tool crypt this C# code ,who tell me
private void mtOeShpri()
{
this.FEdTPwIoN = new Container();
this.mMADOKXAG = new Label();
this.24TpHZbRi = new TextBox();
this.XWjfTNNEP = new Button();
this.A8180fxx8 = new LabelEx(this.FEdTPwIoN);
this.c9I1Y72Nj = new BtnExit();
base.SuspendLayout();
this.mMADOKXAG.AutoSize = true;
this.mMADOKXAG.BackColor = Color.Transparent;
this.mMADOKXAG.ForeColor = Color.White;
this.mMADOKXAG.Location = new Point(0x1a, 110);
this.mMADOKXAG.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cae);
this.mMADOKXAG.Size = new Size(0x41, 12);
this.mMADOKXAG.TabIndex = 1;
this.mMADOKXAG.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cbe);
this.24TpHZbRi.Location = new Point(100, 0x6a);
this.24TpHZbRi.MaxLength = 30;
this.24TpHZbRi.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1ccc);
this.24TpHZbRi.Size = new Size(0x87, 0x15);
this.24TpHZbRi.TabIndex = 3;
this.XWjfTNNEP.BackgroundImage = Resources.XK0uQtBFr();
this.XWjfTNNEP.BackgroundImageLayout = ImageLayout.Stretch;
this.XWjfTNNEP.FlatStyle = FlatStyle.Popup;
this.XWjfTNNEP.Location = new Point(0xf6, 0x69);
this.XWjfTNNEP.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1ce0);
this.XWjfTNNEP.Size = new Size(40, 0x17);
this.XWjfTNNEP.TabIndex = 4;
this.XWjfTNNEP.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cf2);
this.XWjfTNNEP.UseVisualStyleBackColor = true;
this.XWjfTNNEP.Click += new EventHandler(this.CbxxJWDmJ);
this.A8180fxx8.BackColor = Color.Transparent;
this.A8180fxx8.ForeColor = Color.WhiteSmoke;
this.A8180fxx8.LineDistance = 5;
this.A8180fxx8.Location = new Point(12, 0x25);
this.A8180fxx8.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cfa);
this.A8180fxx8.Size = new Size(0x133, 0x39);
this.A8180fxx8.TabIndex = 7;
this.A8180fxx8.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1d0e);
this.c9I1Y72Nj.BackColor = Color.Transparent;
this.c9I1Y72Nj.Location = new Point(0x12a, 3);
this.c9I1Y72Nj.Mode = 0;
this.c9I1Y72Nj.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1da2);
this.c9I1Y72Nj.Size = new Size(20, 20);
this.c9I1Y72Nj.TabIndex = 8;
this.c9I1Y72Nj.Click += new EventHandler(this.yaJZi60GG);
base.AutoScaleDimensions = new SizeF(6f, 12f);
base.AutoScaleMode = AutoScaleMode.Font;
this.BackColor = Color.FromArgb(90, 0x8d, 210);
this.BackgroundImage = Resources.gSqJHZYti();
base.ClientSize = new Size(330, 0x91);
base.Controls.Add(this.c9I1Y72Nj);
base.Controls.Add(this.A8180fxx8);
base.Controls.Add(this.XWjfTNNEP);
base.Controls.Add(this.24TpHZbRi);
base.Controls.Add(this.mMADOKXAG);
base.FormBorderStyle = FormBorderStyle.None;
base.MaximizeBox = false;
base.MinimizeBox = false;
base.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1db6);
base.ShowInTaskbar = false;
base.StartPosition = FormStartPosition.CenterParent;
this.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1dc6);
base.TopMost = true;
base.ResumeLayout(false);
base.PerformLayout();
}
Last edited by wujkun : 08-02-2011 at 03:19 AM.
Reply With Quote
  #2  
Old 08-01-2011, 10:45 AM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default how to decrypt this c# code
how to decrypt this c# code
Reply With Quote
  #3  
Old 08-01-2011, 11:06 AM
kao kao is offline
Senior Member
  
Join Date: Sep 2007
Posts: 184
Default
1) Nobody can tell you which protector it is from the code you posted. Use tools like DNiD or PiD to detect what protector it is.
2) SAE (Simple Assembly Explorer) deobfuscator should be able to decrypt strings.
Reply With Quote
  #4  
Old 08-01-2011, 11:41 AM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default
I know .exe file use .net reactor 4.x packed,i use reactor decryptor 1.7 get code,but this code have encrypted,eg:
private void mtOeShpri()
{
this.FEdTPwIoN = new Container();
this.mMADOKXAG = new Label();
this.24TpHZbRi = new TextBox();
this.XWjfTNNEP = new Button();
this.A8180fxx8 = new LabelEx(this.FEdTPwIoN);
this.c9I1Y72Nj = new BtnExit();
base.SuspendLayout();
this.mMADOKXAG.AutoSize = true;
this.mMADOKXAG.BackColor = Color.Transparent;
this.mMADOKXAG.ForeColor = Color.White;
this.mMADOKXAG.Location = new Point(0x1a, 110);
this.mMADOKXAG.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cae);
this.mMADOKXAG.Size = new Size(0x41, 12);
this.mMADOKXAG.TabIndex = 1;
this.mMADOKXAG.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cbe);
this.24TpHZbRi.Location = new Point(100, 0x6a);
this.24TpHZbRi.MaxLength = 30;
this.24TpHZbRi.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1ccc);
this.24TpHZbRi.Size = new Size(0x87, 0x15);
this.24TpHZbRi.TabIndex = 3;
this.XWjfTNNEP.BackgroundImage = Resources.XK0uQtBFr();
this.XWjfTNNEP.BackgroundImageLayout = ImageLayout.Stretch;
this.XWjfTNNEP.FlatStyle = FlatStyle.Popup;
this.XWjfTNNEP.Location = new Point(0xf6, 0x69);
this.XWjfTNNEP.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1ce0);
this.XWjfTNNEP.Size = new Size(40, 0x17);
this.XWjfTNNEP.TabIndex = 4;
this.XWjfTNNEP.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cf2);
this.XWjfTNNEP.UseVisualStyleBackColor = true;
this.XWjfTNNEP.Click += new EventHandler(this.CbxxJWDmJ);
this.A8180fxx8.BackColor = Color.Transparent;
this.A8180fxx8.ForeColor = Color.WhiteSmoke;
this.A8180fxx8.LineDistance = 5;
this.A8180fxx8.Location = new Point(12, 0x25);
this.A8180fxx8.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1cfa);
this.A8180fxx8.Size = new Size(0x133, 0x39);
this.A8180fxx8.TabIndex = 7;
this.A8180fxx8.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1d0e);
this.c9I1Y72Nj.BackColor = Color.Transparent;
this.c9I1Y72Nj.Location = new Point(0x12a, 3);
this.c9I1Y72Nj.Mode = 0;
this.c9I1Y72Nj.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1da2);
this.c9I1Y72Nj.Size = new Size(20, 20);
this.c9I1Y72Nj.TabIndex = 8;
this.c9I1Y72Nj.Click += new EventHandler(this.yaJZi60GG);
base.AutoScaleDimensions = new SizeF(6f, 12f);
base.AutoScaleMode = AutoScaleMode.Font;
this.BackColor = Color.FromArgb(90, 0x8d, 210);
this.BackgroundImage = Resources.gSqJHZYti();
base.ClientSize = new Size(330, 0x91);
base.Controls.Add(this.c9I1Y72Nj);
base.Controls.Add(this.A8180fxx8);
base.Controls.Add(this.XWjfTNNEP);
base.Controls.Add(this.24TpHZbRi);
base.Controls.Add(this.mMADOKXAG);
base.FormBorderStyle = FormBorderStyle.None;
base.MaximizeBox = false;
base.MinimizeBox = false;
base.Name = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1db6);
base.ShowInTaskbar = false;
base.StartPosition = FormStartPosition.CenterParent;
this.Text = mEEQBXcV0nOuZpcbQx.gc1eAtIeA(0x1dc6);
base.TopMost = true;
base.ResumeLayout(false);
base.PerformLayout();
}

i want to know this code how to decrypt
Last edited by wujkun : 08-02-2011 at 03:19 AM.
Reply With Quote
  #5  
Old 08-01-2011, 02:00 PM
pivasik pivasik is offline
Senior Member
  
Join Date: Dec 2007
Posts: 305
Default
FYI, this code is not encrypted. So, there is nothing to decrypt.
__________________
Want something for free - do it by yourself!
Have a problem - ask Google before post.
Reply With Quote
  #6  
Old 08-02-2011, 03:16 AM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default
There was .NET Reactor 4 unpackme somewhere on this board. I unpacked it but did not post full solution. There are no public unpackers for v4.x. LiBX got bored, so I doubt he'll make new version of Reziriz.
Protection has greatly improved compared to version 3.x. Code-flow obfuscation is quite good. All important data are encrypted and decryption key is based on strong name key token. There is some protection against JIT-hook unpackers but it's buggy.
Overall, it's not bad protection as it will stop most of the newbies. Pros will remove any kind of protection anyway.

who help me,worry!!!!
Last edited by Git : 08-02-2011 at 08:34 AM.
Reply With Quote
  #7  
Old 08-02-2011, 05:56 AM
SunBeam SunBeam is offline
Senior Member
  
Join Date: Jun 2011
Posts: 61
Default
Read what pivasik said. It's not encrypted. Names fool people and they think "2389298Au98aUS(A" is encryption T_T..
Reply With Quote
  #8  
Old 08-02-2011, 10:58 PM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default
not encrypted,I want to get current code, how can i do
Reply With Quote
  #9  
Old 08-03-2011, 07:50 AM
Git Git is offline
Super Moderator
  
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default
You posted it above. You are looking at it!.

Git
Reply With Quote
  #10  
Old 08-07-2011, 05:07 AM
wujkun wujkun is offline
Member
  
Join Date: Aug 2011
Posts: 6
Default
SAE (Simple Assembly Explorer) deobfuscator should be able to decrypt strings. but it not work for this code well.
Reply With Quote
Reply

« Previous Thread | Next Thread »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




Reverse Engineering Team - Archive - Top

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2023, Jelsoft Enterprises Ltd.