Defkthon-2014 Reversing-100

This is my first successful hunting in .NET applications.
This CTF was peculiar and tougher too.Firstly wanted to mention 2 things : there were no admins in IRC,there were no description about challenges.

Lets Get back to work now :-)

Link : https://app.box.com/s/kqnh9l7hyj1hfx4bbiot
File description :

So it is clear that it is a .NET application.
Tools I used -> Jetbrains Dotpeek,You can use Reflector also.
After decompiling and opening Defkthon.cs this is what i found :-)

Nullcon HackIm 2014 Reverse-1

This was a easier one though i had to dig a bit.

Question : Find the flag hidden not so deep inside.

link : http://ctf.nullcon.net/data/2014/lev/re/win32_input.zip

Ah now lets get back to work. :-)

First thing load in olly to patch it and load in IDA to understand program flow.This is my way of solving reverse engineering challenges for windows.

In IDA if u look at strings window u find this ")T(+,*'))$&T(Y)*#(+&#+)$%'T+&#(T" repeated 4 times and 1 accompaning the string FLAG.By running the exe u can find that it prints out "FLAG:)T(+,*'))$&T(Y)*#(+&#+)$%'T+&#(T",so It goes to the 4th ")T(+,*'))$&T(Y)*#(+&#+)$%'T+&#(T".Well now we will check what is making it print it and you can see that in olly similarly these calls before it prints the string FLAG:")T(+,*'))$&T(Y)*#(+&#+)$%'T+&#(T"

Click to enlarge..I have written comments..so check it out..
NOP the Call..