movfuscator
A C compiler that reduces programs to only 'mov' instructions, demonstrating Turing-completeness and enabling extreme obfuscation.
What is movfuscator?
M/o/Vfuscator is a C compiler that translates programs into executables using only the x86 'mov' (move) instruction. It proves that 'mov' is Turing-complete, meaning any computation can be expressed through data movement alone. The compiler transforms arithmetic, logic, control flow, and function calls into complex sequences of 'mov' operations, creating heavily obfuscated binaries.
Low-level programmers, compiler enthusiasts, and security researchers interested in obfuscation techniques, unconventional computing models, or educational demonstrations of Turing-completeness.
It offers a unique, extreme form of code obfuscation by eliminating traditional control flow and arithmetic instructions, making reverse engineering exceptionally difficult. As a proof-of-concept, it provides deep insights into compiler design and the theoretical limits of minimal instruction sets.
Overview
The single instruction C compiler
Use Cases
Best For
- Creating heavily obfuscated binaries to deter reverse engineering
- Educational demonstrations of Turing-completeness and compiler theory
- Experimenting with unconventional computing models and minimal instruction sets
- Researching control flow flattening and obfuscation techniques
- Exploring the limits of the x86 architecture and single-instruction computing
- Generating 'mov'-only programs for security challenges or CTF competitions
Not Ideal For
- Production software where execution speed is critical, due to massive performance overhead from mov-only operations.
- Modern C codebases using C99 or later features, as it only supports C89 and will error on syntax like bool or mid-block declarations.
- Projects heavily reliant on external libraries without recompilation, because of ABI conflicts and unsupported function pointers to external functions.
Pros & Cons
Pros
Handles a full C89 subset, including floating-point arithmetic via an optional emulation library (softfloat32.o, etc.), as specified in the README.
Implements jumps, loops, and function calls through mov operations, flattening control flow graphs and making reverse engineering exceptionally difficult, as shown in the overview images.
Includes scripts to transform output into other minimal instruction sets like XOR or ADD, and RISC-like data transfers, enhancing obfuscation options for research or challenges.
Demonstrates that mov is Turing-complete, providing deep insights into compiler theory and minimal instruction sets, inspired by Stephen Dolan's paper.
Cons
LCC is a C89 compiler, so C99 features like bool, for (int ...), or mid-block variable declarations cause compilation errors, limiting use with modern code.
The use of lookup tables for arithmetic leads to large binary sizes and slow execution; the README notes symbol tables can be extremely large, requiring stripping with -s.
Calls to external libraries can clobber registers, and function pointers to external functions are not implemented, requiring workarounds like internal wrapping, as admitted in the Limitations section.
Frequently Asked Questions
Related Projects
8ccA Small C Compiler
cCompile and execute C "scripts" in one go!
PCCPortable C Compiler sources
LLVMCollection of modular and reusable compiler and toolchain technologies
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.