Hack Forums
Please Help, Deobfuscate an autoit compile .exe - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: Please Help, Deobfuscate an autoit compile .exe (/showthread.php?tid=6210410)



Please Help, Deobfuscate an autoit compile .exe - freegama - Jun 21, 2022

Hi, I just found out the forum and I am in need a of advice on a big problem am facing.

So I am trying to decompile an autoit compiled .exe, but apparently he using CWautcomp 2.17 to Obfuscate and compile for 64bit. I was able to pull out the source code but it is all Obfuscated. So I am wondering if there is any other way to get the source code (while it is running in the process), I was able to dump the memory using pd (process dump) of the .exe while it was running but it is still Obfuscated (or did I not done it correctly)

Please help me with what steps I can do to continue further, if not is there any tool out there that can pull out the source code when the compile .exe is running and intepret the function. Thank you so much.

I will provide screenshot if requested for further clarifying if needed. Thanks.


RE: Please Help, Deobfuscate an autoit compile .exe - PELock - Aug 24, 2022

Is it obfuscated with my tool?

https://www.pelock.com/products/autoit-obfuscator

If so - I don't know any automatic tools for it yet, there were some failed attempts to deobfuscate the code, but I haven't seen one working properly.