Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

An unsuccessful attempt to apply transformations to a function #25

Open
colby57 opened this issue Oct 2, 2024 · 0 comments
Open

An unsuccessful attempt to apply transformations to a function #25

colby57 opened this issue Oct 2, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@colby57
Copy link

colby57 commented Oct 2, 2024

I ran into a problem with an obfuscator, because of which transformers are often not applied to the selected function. Out of 15 attempts, the obfuscator was able to apply transformations to the "main" function only 2 times, provided that the arguments remained the same:

-f main -t ConstantCrypt -t BogusControlFlow -t DecompBreak -t Substitution

The following C++ code was used for testing:

#include <Windows.h>
#include <stdio.h>

int main()
{
    auto cur = GetCurrentProcessId() ^ 0xDEAD;
    char buf[32];
    sprintf_s(buf, "%d", cur);
    MessageBoxA(NULL, buf, "Title", 0);
    return 0;
}

Result:
image

I also attach two log files, "failed_log.txt " it is associated with the moment when the obfuscator could not apply transformations to the file, and "success_log.txt "exactly the opposite:
success_log.txt
failed_log.txt

And attach the binary file along with the pdb (and just in case with the ".protected" file).
ConsoleApplication1.zip

@es3n1n es3n1n self-assigned this Oct 2, 2024
@es3n1n es3n1n added the bug Something isn't working label Oct 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants