AutoIT programm decompile

01/06/2016 17:14 SturmGhost#1
I want to decompile the program "ReMouse" but it looks like its somehow protected. OllyDbg can't find useful text strings, "myAutToExe" and "Exe2Aut" can't decompile it correctly.

OllyDbg says it's an AutoIT script.
01/06/2016 20:55 alpines#2
Use PEExplorer or something similar to detect the protection / package software used for that.
01/13/2016 21:14 SturmGhost#3
Quote:
Originally Posted by alpines View Post
Use PEExplorer or something similar to detect the protection / package software used for that.
Just got this:

[Only registered and activated users can see links. Click Here To Register...]

Exe2Aut gives me this crap:

[Only registered and activated users can see links. Click Here To Register...]

Any idea? Looks encrypted?:confused:
01/13/2016 21:17 alpines#4
It's not packed, it's obfuscated. You have to use different deobfuscators on it to see which one works (maybe it even has multiple obfuscators in it).