2 ms·
They're not encoded, but the code blocks are shuffled. That's why disassembly does look straightforward, but it used to thwart BinDiff at the time.
by sedatk 5mo ago
They're not encoded, but the code blocks are shuffled. That's why disassembly does look straightforward, but it used to thwart BinDiff at the time.
- dataflow 5mo agoWhat made you believe this is the case? any examples/links/etc.?
- j16sdiz 5mo agoIf I understand correctly, that is just randomness comes from parallel compiling and linking. If you saying there is a whole step just scrambling blobs, i will be very surprised.
- shakna 5mo agoThat sounds a lot like US9116712, but I don't think its ever been publicly said that Windows does this.