AutoIt Obfuscator — Obfuscation du code source des scripts AutoIt

AutoIt Obfuscator est un outil permettant de modifier le code source des scripts AutoIt de manière à rendre très difficile l'analyse du code obfusqué.

Plus de détails techniques, téléchargements et documentation disponibles sur :

https://www.pelock.com/products/autoit-obfuscator

Interface en ligne :

https://www.pelock.com/autoit-obfuscator/

Qu'est-ce que l'obfuscation de code source ?

L'obfuscation est un processus de transformation du code source AutoIt en une version protégée de lui-même. La fonctionnalité du script reste identique, tout fonctionne de la même manière, mais le code source est protégé contre l'analyse, toutes les variables sont chiffrées, les chaînes de caractères sont chiffrées, notre AutoIt Obfuscator utilise plusieurs stratégies d'obfuscation pour protéger le sens réel de votre code source AutoIt.

Exemple de script AutoIt avant obfuscation```autoit

#include <MsgBoxConstants.au3>

Example()

Func Example() MsgBox($MB_SYSTEMMODAL, "AutoIt Obfuscator", "Hello World!") EndFunc ;==>Example

### Après l'obfuscation```autoit
;////////////////////////////////////////////////////////////////////////////////
;//
;// AutoIt Obfuscator v2.1 - Bartosz Wójcik
;//
;// Website : https://www.pelock.com/products/autoit-obfuscator
;// Version : v2.1
;// Date    : 08.02.2024
;//
;////////////////////////////////////////////////////////////////////////////////

#include <Array.au3>
#include <MsgBoxConstants.au3>
#AutoIt3Wrapper_Tidy_Stop_OnError=n
#AutoIt3Wrapper_Run_AU3Check=n
Global Const $daSQ_n1JN_mBs1I_ = Asc(StringMid("Random(1, 270905415 + SRandom(1566730703), 1)", 19, 1))
Global $RYRWVDVJ = Asc("J")
Global $RYXLYH_RTGANHXUI = Asc("3")
Global $tagRrdruaavjk[3] = [150, 1017374602, 10411]
Global $DoaFoGAWMNbBmkAe__d = 4045
Global $AXCGXJWX_OLRCOQFSXX = Asc("t")
Global Const $iQzojqte = 26933
Global Const $var_15[2][8] = [[1595107513, 1104537718, 868900013, 105640690, 47653, 116, 693837332, 16233], [1211827987, 1657997570, 37032, 227, 57, 6273, 762969513]]
#OnAutoItStartRegister "VwdmsFnzdotDyuxttspg"
Global Const $var_487[2][8] = [[1083217155, 30638, 84, 144, 43877, 189, 1295519879, 1915220323], [247, 163, 143, 18102, 51, 17202]]
Global $QVCEHSV[2][9] = [[866325531, 131], [18637, 203, 995096871, 202, 287364341, 29839, 367413199, 52009, 242297425]]
Global $var_3525 = Asc(StringMid("Until 1", 2, 1))
Global Const $WMMQB_NIFPPM[2][15] = [[81, 876847059, 170, 47439, 863656242, 33, 245, 119, 27673, 136, 28, 758746073, 199,  _
92],  _
[129, 1658572839, 42061, 94, 70, 61382, 183, 12027, 91, 221, 43126, 1736920964, 201,  _
199, 993478498]]
Global Const $var_1984[15] = [2081761766, 3730, 731908840, 52077, 586602441, 1456646884, 1133870265, 950602932,  _
26639, 94, 1477000589, 142, 388924395, 184, 962894257]
Global $pTyvbacuiPcopcrwtzMklja[7] = [10180, 91, 112, 18252, 987799017, 2057457675, 918277144]
Global Const $var_1013[2][9] = [[670581154, 47303, 1365877447, 1573616251], [58622, 884054024, 1848519651, 15229, 13921, 50, 62097, 42, 15]]
Global Const $0_8NclM_kVz5mtpKHxsE = 127
Global Const $TMPeDgi_YcAj9m__ = 210
Global Const $eLybjmNrwrnkaeWbnyuga = 233690701
Global $ply1orzT_26sCWksrUbe_T_[15] = [10592, 966841092, 5959, 162, 54645, 138, 116485994, 72967675, 20376, 24742, 479499993,  _
24, 136, 712789901, 169]
Global Const $RUJJVMWQD_SRVNOZQS = Asc(StringMid('Asc(StringMid("uBdB3fJaKj", 74 , 1))', 14, 1))
#OnAutoItStartRegister "PDVwv_rlXpGPnDT_rerRdIt"
Global Const $JkpEJMWuV3xIs_U_Ww5_e = Asc(StringMid('StringLen("7cnVFjYCh8")', 13, 1))
#OnAutoItStartRegister "func_843"
Global Const $var_186 = Asc(":")
Global $var_232[5] = [181, 47520, 180, 17769, 908012825]
#OnAutoItStartRegister "Csxsdy"
Global $aAnefpjqin = 74
Global $PhPOBw6C___dgDQq = 18
Global $TCBDV_KZAXCB = 1610629136
Global $sKrndyBafzrRrnztv = 30
Global $yYuG7mfW5T___7Hm = 8
Global $IXEFUXDYXV_BQHOLMW = 30
Global $FHANKWNTCU_LXGYYGBMZ_GPLLLOGDO = 20
Global $JSDCW_FFPIYFSC = 26933
Global $bFbbccxjwr = 834927369
Global $var_2995 = 1952693505
Global $GRBDSMW = 36338
Global $var_2922 = 22
Global $Q2cGypOD6cG4gQO_S__rwRXO_ = 915476553
Global $_XFJWQ6Jq_3c_rP = 12
Global $sJhugwfPfnnwafYhrgzwm = 248479756
Local $g_iCvsrwuGtzdva = 617049966
While $g_iCvsrwuGtzdva <> 2147003747
    Switch $g_iCvsrwuGtzdva
        Case 658231252
            $g_iCvsrwuGtzdva = 33656329
            Global $nCtwajwbfNhewozhd = _ArrayToString
        Case 4324177
            Global $iNOxLl_Y5__rSk9 = func_2108
            $g_iCvsrwuGtzdva = 658231252
        Case 1926422611
            $g_iCvsrwuGtzdva = 406152061
            Global $BESCTA = BitAND
        Case 2088978457
            $g_iCvsrwuGtzdva = 1021723140
            Global $Pts7YqvR8ogkYI3_j_ = func_2824
        Case 1637416108
            Global $nFeubksuJaekekoos = StringTrimRight
            $g_iCvsrwuGtzdva = 232503255
        Case 1293800215
            Global $var_824 = Chr
            $g_iCvsrwuGtzdva = 1702584836
        Case 1278717404
            Global $iVgppveam = LBeZ__Ck_yYniNxbnTB
            $g_iCvsrwuGtzdva = 1637416108
        Case 2147003747
            $g_iCvsrwuGtzdva = 737317436
        Case 445534110
            $g_iCvsrwuGtzdva = 463259058
            Global $YPKANC_EANNAEOUTZ_CDSNBCFY = ($iQzojqte > $RYRWVDVJ ? 10 : $0_8NclM_kVz5mtpKHxsE)
        Case 1795214713
            Global $tJkjpqdflxTzzupkaNvxuamd = BitNOT
            $g_iCvsrwuGtzdva = 140913128
        Case 1021723140
            $g_iCvsrwuGtzdva = 499083887
            Global $var_674 = MwsmxbIvzilhkmmv
        Case 249620526
            $g_iCvsrwuGtzdva = 2088978457
            Global $fQoyipvpvvJsxvoydvVwtqcqjjd = func_1645
        Case 51111198
            Global $__uNo_5dDC3irlrj = ($var_1013[0][1] > $var_232[0] ? 36123 : $_vyCRbp_Ex_v7BM)
            $g_iCvsrwuGtzdva = 1333314932
        Case 140913128
            $g_iCvsrwuGtzdva = 774361981
            Global $HMDVVNSCVL_LDKSR_VZTJJLD = BitOR
        Case 953027176
            $g_iCvsrwuGtzdva = 4324177
            Global $dPchzwlhrRbvcbkrhag = func_590
        Case 1333314932
            $g_iCvsrwuGtzdva = 1897445216
            Global $var_3414 = ($idPwvhpegn > $var_674() ? 40 : $RUJJVMWQD_SRVNOZQS)
        Case 347970668
            Global $IH9frd_V_Ny78gj7Pv_ = LjxxediHvmzudFunc
            $g_iCvsrwuGtzdva = 1143886282
        Case 359560691
            Global $var_3109 = kshdBtUJ__VAoRkx_
            $g_iCvsrwuGtzdva = 1926422611
        Case 910530821
            Global $wYEBsrws_FMr__d = MsgBox
            $g_iCvsrwuGtzdva = 1444580454
        Case 499083887
            $g_iCvsrwuGtzdva = 463457632
            Global $gI__fUStt3Z_h2bmq_LETpQXn = func_3772
        Case 1444580454
            $g_iCvsrwuGtzdva = 347970668
            Global $g_nGppkdtsiTctkvzUmrenaixs = func_2879
        Case 1372772068
            Global $g_idWyeukwtfiTlqivgqa = ZmamgqVejvobrdpr
            $g_iCvsrwuGtzdva = 1293800215
        Case 908930352
            ExitLoop 6
        Case 1231237004
            Local $KGOFEZCH_PZGKCPZQ_YWBOIRVIA = ($TMPeDgi_YcAj9m__ < $g_aFammo() ? 552190499 : $ply1orzT_26sCWksrUbe_T_[13])
            $g_iCvsrwuGtzdva = 690808515
        Case 1143886282
            $g_iCvsrwuGtzdva = 953027176
            Global $MYH_v8L__ln_xcJWYaCqIA = StringTrimLeft
        Case 1294486107
            Global $57mJzG60___7RFT = l_o_HXcjpD_SYHQAeR
            $g_iCvsrwuGtzdva = 1253090901
        Case 617049966
            $g_iCvsrwuGtzdva = 1372772068
            Global $var_2346 = XhldjdktogOauclcspvYdgbizf
        Case 406152061
            Global $STROTDCZBV = StringReverse
            $g_iCvsrwuGtzdva = 1468630116
        Case 463457632
            $g_iCvsrwuGtzdva = 910530821
            Global $sLzorjsdrvc = func_142
        Case 774361981
            Global $tagVwyjliaXlozsRqfyyhls = ExqhuvmFunc
            $g_iCvsrwuGtzdva = 658161984
        Case 658161984
            Global $4U5_jiAa__bBPyJ94 = mnVwvcxRAf_d_yt_