Skip to content

Conversation

@jbx81-1337
Copy link
Contributor

Small class that allows to transform one assembly source to another without changing the functionality, useful to break static detection and waste reverse engineers's time :)

Comment on lines +220 to +233
def replace_placeholder(placeholder, line)
case placeholder
when '{src}'

when '{dest}'
# logic to replace destination operand
when '{sp}'
# logic to replace stack pointer
when '{arch_val}'
# logic to replace architecture value
when '{random}'
# logic to replace with random value
end
end
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
def replace_placeholder(placeholder, line)
case placeholder
when '{src}'
when '{dest}'
# logic to replace destination operand
when '{sp}'
# logic to replace stack pointer
when '{arch_val}'
# logic to replace architecture value
when '{random}'
# logic to replace with random value
end
end

false
end

def validate_obfuscation_rules(rules, operands, custom_rule = nil)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It may make sense to have a AND / OR logic here instead of AND only

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

3 participants