Skip to content

An unsuccessful attempt to apply transformations to a function #25

@colby57

Description

@colby57

I ran into a problem with an obfuscator, because of which transformers are often not applied to the selected function. Out of 15 attempts, the obfuscator was able to apply transformations to the "main" function only 2 times, provided that the arguments remained the same:

-f main -t ConstantCrypt -t BogusControlFlow -t DecompBreak -t Substitution

The following C++ code was used for testing:

#include <Windows.h>
#include <stdio.h>

int main()
{
    auto cur = GetCurrentProcessId() ^ 0xDEAD;
    char buf[32];
    sprintf_s(buf, "%d", cur);
    MessageBoxA(NULL, buf, "Title", 0);
    return 0;
}

Result:
image

I also attach two log files, "failed_log.txt " it is associated with the moment when the obfuscator could not apply transformations to the file, and "success_log.txt "exactly the opposite:
success_log.txt
failed_log.txt

And attach the binary file along with the pdb (and just in case with the ".protected" file).
ConsoleApplication1.zip

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions