+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: [FREE] Trying to Deobfuscate any source you want! (/showthread.php?tid=4632358)
[FREE] Trying to Deobfuscate any source you want! - Wardow - Jan 11, 2015
Recommended Paid Crypter:
[img]http://gdurl.com/Z3c9[/img]
Hi guys, i have a serious experience in Deobfuscation/Obfuscation in AutoIT, and i would like to use my knowledge, if you have any source that you want deobfuscated, feel free to post below, and i'll do my best!
Asking Form :
Code
[color=white]Link of the original source code :[/color] (SendSpace, Ge.tt)If you can't decompile it :
Code
[color=white]Link of the Executable :[/color] (SendSpace)Please don't post infected links, and be aware you wont be able to infect me, do not try, infected links have to be reported.
Please post saying thanks if i sent you a deobfuscated source, this will help keeping the thread alive.
Rules :
If you give me a program to decompile/deobfuscate, you have the right to do it.
I wont be responsible if you were not allowed to do such things, you're responsible if you give me a file,
I'm not here to check if the source/sample is being sold over hackforums or else.
* - conteaza - Jan 12, 2015
because my account is new i cant post link :) download source from here h.t.t.p://www51.zippyshare.com/v/tiGOsVyq/file.html i dont know how to deobfuscate
* - Wardow - Jan 12, 2015
(Jan 12, 2015 12:37 AM)conteaza Wrote: because my account is new i cant post link :) download source from here h.t.t.p://www51.zippyshare.com/v/tiGOsVyq/file.html i dont know how to deobfuscate
Here a deobfuscated source : https://www.sendspace.com/file/bhrhi1
For Vars/Functions this is not obfuscation, this is just var/func renaming, i can't do anything for this.
Ignore all the start of the script, look at the end and start looking the code from the end.
* - smnDAThax - Jan 12, 2015
(Jan 12, 2015 06:48 PM)W̴̵̶̷̸̸̷̶̵̴̨̧̧̨̛̛̠̲͇αя∂σω Wrote: Infected file, injecting shit into AppLaunch.exe, i am analyzing more.
yes , i sayd i dont want to infect anyone here ,i just want to have the source idk how i can do it , i have vmware on pc so i give a fuck when i get infected there , but i rly dont know how i can deobfuscate thx in advance
* - Wardow - Jan 12, 2015
(Jan 12, 2015 07:16 PM)smnDAThax Wrote: yes , i sayd i dont want to infect anyone here ,i just want to have the source idk how i can do it , i have vmware on pc so i give a fuck when i get infected there , but i rly dont know how i can deobfuscate thx in advance
This is not an Autoit file, and if it's it's very well protected.
Where did you got this file?
* - smnDAThax - Jan 12, 2015
its cubexsoftware a gamecheat and thiss is 100% an autoit file , its the compiled exe , he i saw little msg at skype that he using a opfuscator , themida and a crypter to protect his file =( is there noway to get the source??
* - Wardow - Jan 12, 2015
(Jan 12, 2015 07:32 PM)smnDAThax Wrote: its cubexsoftware a gamecheat and thiss is 100% an autoit file , its the compiled exe , he i saw little msg at skype that he using a opfuscator , themida and a crypter to protect his file =( is there noway to get the source??
This is not a game cheat, it's infected and it's injecting into AppLaunch.exe WTF?
Okay i got it, i am getting the source.
https://www.sendspace.com/file/d1li6u
This is all i can get.
* - smnDAThax - Jan 13, 2015
THANK YOU :* thanks dude no one of my german friends can crack it <3 you are an specialist !
* - Wardow - Jan 13, 2015
(Jan 13, 2015 07:35 AM)smnDAThax Wrote: THANK YOU :* thanks dude no one of my german friends can crack it <3 you are an specialist !
Thanks, i didnt cracked it, just decompiled, and deobfuscated, anyway it's very simple to get a version without licence now :p
* - DamienVC - Jan 13, 2015
If I have full ownership to a miner project, and only received the obfuscated builder, can I give it to you for deobfuscation?
I am the current sole owner of that project, can prove it too.
* - Wardow - Jan 13, 2015
(Jan 13, 2015 09:16 AM)DamienVC Wrote: If I have full ownership to a miner project, and only received the obfuscated builder, can I give it to you for deobfuscation?
I am the current sole owner of that project, can prove it too.
Is it Autoit? If not give me i'll try to do something anyway, if it is i'll be easy.
* - DamienVC - Jan 13, 2015
(Jan 13, 2015 09:21 AM)W̴̵̶̷̸̸̷̶̵̴̨̧̧̨̛̛̠̲͇αя∂σω Wrote: Is it Autoit? If not give me i'll try to do something anyway, if it is i'll be easy.
Figured out that the builder/stub is C++ with the stub generated with no dependencies.
Just went by your signature.
* - Wardow - Jan 13, 2015
(Jan 13, 2015 09:27 AM)DamienVC Wrote: Figured out that the builder/stub is C++ with the stub generated with no dependencies.
Just went by your signature.
It's impossible to decompile C++.
You can just dissasemble, get the machine code of the Program, and some programs are able to imagine the C++ code using the Machine Code, nothing efficient.
* - smnDAThax - Jan 13, 2015
dude? can u maybe try this one? its the same cheat i think same crypted and opfuscated , but other source , i mean newer functions and more , would be nice =)
but the exe is 200bytes smaller , would be verry nice when u can do it , when u have time
thx in advance :*
the link :
h.t.t.p://www27.zippyshare.com/v/MwOwwsV5/file.html
BUT ONLY IF YOU HAVE TIME
* - Wardow - Jan 15, 2015
(Jan 13, 2015 02:33 PM)smnDAThax Wrote: dude? can u maybe try this one? its the same cheat i think same crypted and opfuscated , but other source , i mean newer functions and more , would be nice =)
but the exe is 200bytes smaller , would be verry nice when u can do it , when u have time
thx in advance :*
the link :
h.t.t.p://www27.zippyshare.com/v/MwOwwsV5/file.html
BUT ONLY IF YOU HAVE TIME
Sorry for the time, here the source : https://www.sendspace.com/file/81hepx