Posted: Wed Feb 06, 2008 10:30 pm
1. as a lightweight way to make code difficult to read you can hide instructions:
add eax, ebx
jmp $+4
can be hidden with
test eax, 2EBD801h
jmp $-4
it can be used with other instructions as well (conditional jump forward after instruction that changes flags maybe)
some assembly and machine language is required
2. use instructions that people are less familiar with such as sse2,3,4 applying approach above
add eax, ebx
jmp $+4
can be hidden with
test eax, 2EBD801h
jmp $-4
it can be used with other instructions as well (conditional jump forward after instruction that changes flags maybe)
some assembly and machine language is required
2. use instructions that people are less familiar with such as sse2,3,4 applying approach above