Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

String Decryption Help

Featured Replies

Posted

Hey guys,

I am just learning the Mono.Cecil and trying to write a simple string decrypter / junk code remover and I have a couple of questions.

The methods that are added from the obfuscator are duplicated. Loop through the modules and remove the junk I only remove the junk from one instance. 

image.png.b73609cdd6d9774aec908a30604ecfc4.png

My first question how would I go about updating the token of the other methods to be the method with the junk code removed or what is the best practise for fixing this?

The other question is what is the best way to loop through and remove IL code from a binary. I am currently using NOP to remove the junk code (Line 98-106) but when I use mDef.Body.Instructions.Remove(mDef.Body.Instructions) it get errors as it doesn't seem to remove all the code. I am not sure if using a for loop and using instruction.Count is the problem. What is the best way to handle this?

I probably need a better understanding of how .NET binaries work but any help would be greatly appreciated.

Attached is an unpackme sample and my string decrypter source .

Thanks

 

deob.cs UnpackMeSimple.zip

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.