> Why would you assume that?
I thought too highly of modern compiler string literal obfuscation.
I thought too highly of modern compiler string literal obfuscation.
It's actually very easy to find string literals in executables because of this, not hard.
the what now?
Of course they can all be reverse engineered by hand, if you figure out the scheme used you can write yourself an IDA or Ghidra plugin/script to automate the process - which assumes that the method doesn't (subtly) change between different builds of the target. Or you can attempt to intercept memory accesses of the application. But that's tedious, annoying and complex busywork that no one really wants to do.