deobfuscator for .Net

As a reaction on this question Skater .NET Obfuscator development team was refining the obfuscator's code protection functionalities. Skater prevents de4dot now and Skater persistently and successfully struggles with deobfuscation. Skater cannot easily be hacked and deobfuscated by the contemporary open source deobfuscators.

Let’s study an executable protected by Skater .NET Obfuscator. .NET deobfuscate means deobfuscating of .net exe files, which were developed by visual studio.

Let’s start from decompiling the .NET file. It is a heavily obfuscated .NET executable and it could be more difficult to crack. The executable is written in .NET so we can decompile it using some of the popular tools made for this purpose (.NET Refractor, JustDecompile, etc). As we can see, the code is obfuscated: functions have been entangled, variables/classes/methods got meaningless names. Also the spaghetti code inside the obfscted.exe contains a lot of junk instructions and that is difficult to follow. Even applying a known tool for .NET deobfuscation did not helped much.