Find/Replace unknown strings

[EndGame2013]

What I need to do:

Open a file and read it into a variable

Search that variable for any instance of "$A" and replace every "$A" plus 4 characters after that with an encrypted version. The encryption should use the same key every time.

For example the file contains:

$A1234 = "something"

$A2351 = "something"

$A0572 = "something"

$A2000 = "something"

I want to replace all of those variable names with an encrypted version. Including the dollar sign, which when replacing should be appended back on.

How do I do this?

[water]

$sFileContent = FileRead("C:\temp\test.txt")

$sFileContent = StringReplace($sFileContent, "$A1234 = ", "$YourNewVariableName = ")

; .. Repeat for every variable

FileWrite("C:\temp\testNew.txt", $sFileContent)

[EndGame2013]

$sFileContent = FileRead("C:\temp\test.txt")

$sFileContent = StringReplace($sFileContent, "$A1234 = ", "$YourNewVariableName = ")

; .. Repeat for every variable

FileWrite("C:\temp\testNew.txt", $sFileContent)

There are thousands of variables of which I do not know the name of, I only know they start with $A.

This is what I came up with which seems to do the trick:

#include <String.au3>
$fh = FileOpen(@workingdir &"\obfuscated.au3",0)
$file = FileRead($fh)
FileClose($fh)
$i = 0
$a = 0
while $i < 5000
$found = StringMid($file,StringInStr($file, "$A")+1, 6)
$file = StringReplace($file,$found,_StringEncrypt(1,$found,'somekey',1))
$i = $i +1
$a = $a +1
if $a >= 25 then
$percent = round(($i/5000)*100,2)
ConsoleWrite($percent&@CRLF)
$a = 0
EndIf
wend
$fh = FileOpen(@workingdir&"\crypt_obfu.au3",2)
FileWrite($fh,$file)
FileClose($fh)
ConsoleWrite("DONE!")

What it does is search for 5000 strings that start with $A and replaces the 6 characters after $ with an encrypted version of that string. Put a little bit of console write stuff in there to track the progress, save to a new file and done!

I wanted this so I could encrypt the variable names of an obfuscated script and still have it function properly. The only reason to do this is to further confuse someone if they get to the source code, and possibly confuse a deobfuscator.

EDIT* By the way this is in no way fast if you have thousands of variables, which is likely. Patience is key I suppose

Edited November 6, 2011 by SkybotGaming

[AutoBert]

• declarate the array-variable
• Read the File into the Array _FilereadToArray
• Generate the Key from your Passwort _Crypt_DeriveKey
• Loop through the array For ...
  • using the "&" Operator,
  • _Crypt_EncryptData
  • StringMid to manipulate the array-element
• ... Next
• Write the array back to a File _FileWriteFromArray
• destroy the key _Crypt_DestroyKey

Just have a look to the functionnames in the helfile. With the needed include-File it's a script in 9 Lines

[Jos]

What is the difference with what obfuscator already does today?

[water]

There are thousands of variables of which I do not know the name of, I only know they start with $A.

Sorry, I didn't read you original post carefully enough

Please use obfuscator on your file as Jos suggested. Your file contains plain AutoIt code so encrypting the variable names is a job for obfuscator - and I'm sure it's faster.

Edited November 6, 2011 by water

[EndGame2013]

Sorry, I didn't read you original post carefully enough

Please use obfuscator on your file as Jos suggested. Your file contains plain AutoIt code so encrypting the variable names is a job for obfuscator - and I'm sure it's faster.

Yes but I am making the variable names even longer. Also, I do not know how the obfuscator works.

* removed *

Edited November 6, 2011 by Jos

[guinness]

Wait! You did what? Read the forum rules first, you've just broken the number one rule of AutoIt, congratulations.

As well as studying the rules intensively, look at the FAQ on decompiling too and come back when you've learnt them by heart. Also your username is little suggestive of what your program probably does.

Reported.

Edited November 6, 2011 by guinness

[Jos]

For the record: The variable and Func naming can not be de-obfuscated as the information isn't available anywhere.

Other than that: all that needs to be said is said about it so don't start a new topic on this because this only triggers attention to it and you basically are doing it to yourself.

Edited November 6, 2011 by Jos