feat: Base for Simple-Virtualization Feature
- Prepare the codebase for the upcoming simple-virtualization feature for Ryujin.
This commit is contained in:
@@ -436,6 +436,12 @@ void RyujinObfuscationCore::insertJunkCode() {
|
||||
|
||||
}
|
||||
|
||||
void RyujinObfuscationCore::insertVirtualization() {
|
||||
|
||||
//TODO
|
||||
|
||||
}
|
||||
|
||||
void RyujinObfuscationCore::updateBasicBlocksContext() {
|
||||
|
||||
auto new_obfuscated_opcodes = getProcessedProc().getUpdateOpcodes();
|
||||
@@ -455,7 +461,7 @@ BOOL RyujinObfuscationCore::Run() {
|
||||
//Obfuscate IAT for the configured procedures
|
||||
if (m_config.m_isIatObfuscation) {
|
||||
|
||||
//First obfuscate IAT
|
||||
// Obfuscate IAT
|
||||
obfuscateIat();
|
||||
|
||||
//Update our basic blocks context to rely 1-1 for the new obfuscated opcodes.
|
||||
@@ -463,9 +469,19 @@ BOOL RyujinObfuscationCore::Run() {
|
||||
|
||||
}
|
||||
|
||||
if (m_config.m_isVirtualized) {
|
||||
|
||||
// Insert Virtualization
|
||||
insertVirtualization();
|
||||
|
||||
//Update our basic blocks context to rely 1-1 for the new obfuscated opcodes.
|
||||
this->updateBasicBlocksContext();
|
||||
|
||||
}
|
||||
|
||||
if (m_config.m_isJunkCode) {
|
||||
|
||||
//First let's insert junk code
|
||||
// Insert junk code
|
||||
insertJunkCode();
|
||||
|
||||
//Update our basic blocks context to rely 1-1 for the new obfuscated opcodes.
|
||||
@@ -473,10 +489,6 @@ BOOL RyujinObfuscationCore::Run() {
|
||||
|
||||
}
|
||||
|
||||
/*
|
||||
if (m_config.m_isVirtualized) todoAction();
|
||||
*/
|
||||
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
|
||||
@@ -28,6 +28,7 @@ private:
|
||||
void addPaddingSpaces();
|
||||
void obfuscateIat();
|
||||
void insertJunkCode();
|
||||
void insertVirtualization();
|
||||
std::vector<uint8_t> fix_branch_near_far_short(uint8_t original_opcode, uint64_t jmp_address, uint64_t target_address);
|
||||
uint32_t findOpcodeOffset(const uint8_t* data, size_t dataSize, const void* opcode, size_t opcodeSize);
|
||||
|
||||
|
||||
@@ -13,7 +13,7 @@ auto main() -> int {
|
||||
config.m_isIgnoreOriginalCodeRemove = FALSE;
|
||||
config.m_isJunkCode = TRUE;
|
||||
config.m_isRandomSection = FALSE;
|
||||
config.m_isVirtualized = FALSE;
|
||||
config.m_isVirtualized = TRUE;
|
||||
config.m_isIatObfuscation = TRUE;
|
||||
config.m_isEncryptObfuscatedCode = FALSE;
|
||||
std::vector<std::string> procsToObfuscate{
|
||||
|
||||
Reference in New Issue
Block a user