Skip to main content

Obfuscation: Constant (C-String)

R5AC uses a simple XOR algorithm where the decryption key length and encrypted content length are identical.

K32GetMappedFileNameA0x20ea35 KERNEL32.dll
0x3a3e51 ntdll.dll
0x54ee61 ADVAPI32.dll
0x542551 steamnetworkingsockets.dll
0x542691 steam_api64.dll
0x2f1cc2 EOSSDK-Win64-Shipping.dll
0x54ee31 EasyAntiCheat_EOS
0x3a3e81 wine_get_version
0x20ec61 .dll

VirtualQuery

GetLastError

VirtualProtect

OpenSCManagerA

OpenServiceA

QueryServiceStatusEx

CloseServiceHandle

WideCharToMultiByte

RtlCaptureStackBackTraceee