xiaoyaoxianj / syswh3_randomized

A tool that dynamically modifies syswh3 static features against AV/EDR static detection

SysWh3_Randomized

---

Author: https://github.com/xiaoyaoxianj

This project is based on SysWispers-FuntionRandomizer , which adds variable obfuscation on top of the original, and can customize the length of the variable.

I recommend deleting unnecessary content from the Syswh3-generated files before using the script. Use the following tips to improve your efficiency.

There are some variables in the project that cannot be easily replaced and can be implemented directly using renaming

Tips:

Here are some useful regular expressions to help us use in VSstudio(Ctrl + H)

Delete comments in all // modes

^[\t]*//[^\n]*\n

Delete all empty lines

^(?([^\r\n])\s)*\r?$\r?\n

Delete comments from all asm files

;.* ---> \n

Usage

python Syswh3_Randomized.py -l 6 xiaoyaoj.c xiaoyaoj.asm xiaoyaoj.h

Help

syswh3_randomized's Issues

bug

生成后，changed_log.txt文件为空