Exe obfuscator

[barthen]

I haven't seen it mentioned on the site but some time ago Blizzard released by mistake Warcraft III Reforged 2.0.1 with debug symbols and some internal tools.

Google "Warcraft III 2.0.1 with debug symbols" to download the torrent.

There you can find the game binary before and after obfuscation, and a debug version with more stuff. All three of them having PDB debug symbols.

The reason for this post is that the obfuscator itself is included too (called Aegis_Gen). It has symbols too.

Some of the features: anti-attaching, "mathfuscation", anti-decompilation, anti-debugging, dll blacklisting, anti-disassembly, anti-dumping, return guard, import spoofing.

I don't know if they use the same tool for Wow or other games, but thought you could be interested in taking a look.

[w1dl4r]

Hey, great find.

Had a look at it and it leaves a magic number in the PE header of the .exe it was used on.
Magic number is: 0x1560E0A0 at Offset 0x1C.
Can confirm that they used it on wow Retail as well