View Single Post
Old 02-21-2009, 12:28 PM
high6 high6 is offline
Join Date: Sep 2008
Posts: 14

Originally Posted by rongchaua View Post
- Some strings still encrypted after deobfuscating. I don't know why .
In case you missed it in the other thread.

Originally Posted by high6
Also would be cool if you made it options in desmart. So that you can choose the decrypt string and/or anti control flow and/or renaming.

Also something I added to my code.

Instruction GetNext(Instruction ins)
            ins = ins.Next;
            while (ins != null && (ins.OpCode == OpCodes.Br || ins.OpCode == OpCodes.Br_S))
                ins = ins.Operand as Instruction;
            return ins;
Because control flow obfuscation is applied after string encryption so sometimes you get.

ldc 435
br somewhere
call stringdecrypt
Reply With Quote