Quote:
Originally Posted by rongchaua
- Some strings still encrypted after deobfuscating. I don't know why  .
|
In case you missed it in the other thread.
Quote:
Originally Posted by high6
Also would be cool if you made it options in desmart. So that you can choose the decrypt string and/or anti control flow and/or renaming.
Also something I added to my code.
Code:
Instruction GetNext(Instruction ins)
{
ins = ins.Next;
while (ins != null && (ins.OpCode == OpCodes.Br || ins.OpCode == OpCodes.Br_S))
{
ins = ins.Operand as Instruction;
}
return ins;
}
Because control flow obfuscation is applied after string encryption so sometimes you get.
ldc 435
br somewhere
call stringdecrypt
|