0

enter image description here

i try to reverse this code but cant figure it out what is this number mean or how to call it...

2
  • 1
    Please post code as text instead of an image. Makes it easier for others to read/copy and for sites like google to index.
    – sudhackar
    Feb 11, 2021 at 11:51
  • If you look at the if clauses they don't have any additional variables present. Any optimizing decompiler can handle this pretty well. google "opaque predicates" and how to deal with them.
    – sudhackar
    Feb 11, 2021 at 11:52

1 Answer 1

0

You did not understand why your code is using an obfuscador, first you need to remove the obfuscador used by the developer to only then start the process of reconstructing the algorithm, use appropriate tools for this task like DIE (Detect It Easy), after discovering the name of the obfuscador look for a way to clear its torque, there are many ways for almost all obfuscadores.

5
  • Also be aware to differentiate a Protector from an Obfuscator, Obfuscators are relatively easy to remove since Protector requires a high knowledge of the IL(.NET architecture).
    – Happy
    Feb 5, 2021 at 11:09
  • Thank you im very new about this thing and... should the number just clean without anything left? because i found that it has .net reactor ,and after i cleaned all and i fell like just the number is gone because the file size just decrease like half of old size. Thank you
    – EntryEmb
    Feb 5, 2021 at 13:53
  • like this one Before : ibb.co/NFYPfd4 file size : 22 KB after clean protector (.Net reactor) : ibb.co/W3r9hNX file size 16 KB
    – EntryEmb
    Feb 5, 2021 at 14:09
  • Yes, now the structure of your software is rebuilt and ready to be analyzed, obfuscadores such as .Net Reactor add more routines to confuse your analysis, thus increasing the size of your final executable, now you can start your code analysis, stay tuned for some references as they may have been lost...
    – Happy
    Feb 5, 2021 at 14:16
  • Thank you so much 0x0A
    – EntryEmb
    Feb 5, 2021 at 14:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.