|
|
|
|
|
|
by nneonneo
2825 days ago
|
|
|
They did a first pass obfuscation which replaced local variable names with gibberish and then applied some minification. Then they applied an obfuscation tool 2-3 times for each of the three code snippets, causing the code to bloat up quite considerably. However, at least two different obfuscation tools were used - one simpler one (used for the antidebugger hook) and one more complex one that looked almost like a virtual machine. The output looks a little like the output from your link, but there's a lot of structural differences so I'm not sure it was the same tool. |
|
|