DO NOT DEAL WITH THIS MEMBER
Jan 11, 2015 08:19 PM
(This post was last modified: Mar 12, 2016 09:49 AM by Wardow.)
Recommended Paid Crypter:
[img]http://gdurl.com/Z3c9[/img]
Hi guys, i have a serious experience in Deobfuscation/Obfuscation in AutoIT, and i would like to use my knowledge, if you have any source that you want deobfuscated, feel free to post below, and i'll do my best!
Asking Form :
Code [color=white]Link of the original source code :[/color] (SendSpace, Ge.tt)
Code [color=white]Link of the Executable :[/color] (SendSpace)
Please don't post infected links, and be aware you wont be able to infect me, do not try, infected links have to be reported.
Please post saying thanks if i sent you a deobfuscated source, this will help keeping the thread alive.
Rules :
If you give me a program to decompile/deobfuscate, you have the right to do it.
I wont be responsible if you were not allowed to do such things, you're responsible if you give me a file,
I'm not here to check if the source/sample is being sold over hackforums or else.
Jan 12, 2015 12:37 AM
(This post was last modified: Jan 12, 2015 12:42 AM by conteaza.)
because my account is new i cant post link :) download source from here h.t.t.p://www51.zippyshare.com/v/tiGOsVyq/file.html i dont know how to deobfuscate
DO NOT DEAL WITH THIS MEMBER
Jan 12, 2015 02:33 AM
(This post was last modified: Jan 12, 2015 02:34 AM by Wardow.)
(Jan 12, 2015 12:37 AM)conteaza Wrote: because my account is new i cant post link :) download source from here h.t.t.p://www51.zippyshare.com/v/tiGOsVyq/file.html i dont know how to deobfuscate
Here a deobfuscated source : https://www.sendspace.com/file/bhrhi1
For Vars/Functions this is not obfuscation, this is just var/func renaming, i can't do anything for this.
Ignore all the start of the script, look at the end and start looking the code from the end.
(Jan 12, 2015 06:48 PM)W̴̵̶̷̸̸̷̶̵̴̨̧̧̨̛̛̠̲͇αя∂σω Wrote: Infected file, injecting shit into AppLaunch.exe, i am analyzing more.
yes , i sayd i dont want to infect anyone here ,i just want to have the source idk how i can do it , i have vmware on pc so i give a fuck when i get infected there , but i rly dont know how i can deobfuscate thx in advance
DO NOT DEAL WITH THIS MEMBER
Jan 12, 2015 07:19 PM
(This post was last modified: Jan 12, 2015 07:19 PM by Wardow.)
(Jan 12, 2015 07:16 PM)smnDAThax Wrote: yes , i sayd i dont want to infect anyone here ,i just want to have the source idk how i can do it , i have vmware on pc so i give a fuck when i get infected there , but i rly dont know how i can deobfuscate thx in advance
This is not an Autoit file, and if it's it's very well protected.
Where did you got this file?
its cubexsoftware a gamecheat and thiss is 100% an autoit file , its the compiled exe , he i saw little msg at skype that he using a opfuscator , themida and a crypter to protect his file =( is there noway to get the source??
DO NOT DEAL WITH THIS MEMBER
Jan 12, 2015 08:09 PM
(This post was last modified: Jan 12, 2015 08:36 PM by Wardow.)
(Jan 12, 2015 07:32 PM)smnDAThax Wrote: its cubexsoftware a gamecheat and thiss is 100% an autoit file , its the compiled exe , he i saw little msg at skype that he using a opfuscator , themida and a crypter to protect his file =( is there noway to get the source??
This is not a game cheat, it's infected and it's injecting into AppLaunch.exe WTF?
Okay i got it, i am getting the source.
https://www.sendspace.com/file/d1li6u
This is all i can get.
THANK YOU :* thanks dude no one of my german friends can crack it <3 you are an specialist !
DO NOT DEAL WITH THIS MEMBER
(Jan 13, 2015 07:35 AM)smnDAThax Wrote: THANK YOU :* thanks dude no one of my german friends can crack it <3 you are an specialist !
Thanks, i didnt cracked it, just decompiled, and deobfuscated, anyway it's very simple to get a version without licence now :p
If I have full ownership to a miner project, and only received the obfuscated builder, can I give it to you for deobfuscation?
I am the current sole owner of that project, can prove it too.
DO NOT DEAL WITH THIS MEMBER
(Jan 13, 2015 09:16 AM)DamienVC Wrote: If I have full ownership to a miner project, and only received the obfuscated builder, can I give it to you for deobfuscation?
I am the current sole owner of that project, can prove it too.
Is it Autoit? If not give me i'll try to do something anyway, if it is i'll be easy.
(Jan 13, 2015 09:21 AM)Wardow Wrote: Is it Autoit? If not give me i'll try to do something anyway, if it is i'll be easy.
Figured out that the builder/stub is C++ with the stub generated with no dependencies.
Just went by your signature.
DO NOT DEAL WITH THIS MEMBER
(Jan 13, 2015 09:27 AM)DamienVC Wrote: Figured out that the builder/stub is C++ with the stub generated with no dependencies.
Just went by your signature.
It's impossible to decompile C++.
You can just dissasemble, get the machine code of the Program, and some programs are able to imagine the C++ code using the Machine Code, nothing efficient.
Jan 13, 2015 02:33 PM
(This post was last modified: Jan 13, 2015 06:21 PM by smnDAThax.)
dude? can u maybe try this one? its the same cheat i think same crypted and opfuscated , but other source , i mean newer functions and more , would be nice =)
but the exe is 200bytes smaller , would be verry nice when u can do it , when u have time
thx in advance :*
the link :
h.t.t.p://www27.zippyshare.com/v/MwOwwsV5/file.html
BUT ONLY IF YOU HAVE TIME
DO NOT DEAL WITH THIS MEMBER
(Jan 13, 2015 02:33 PM)smnDAThax Wrote: dude? can u maybe try this one? its the same cheat i think same crypted and opfuscated , but other source , i mean newer functions and more , would be nice =)
but the exe is 200bytes smaller , would be verry nice when u can do it , when u have time
thx in advance :*
the link :
h.t.t.p://www27.zippyshare.com/v/MwOwwsV5/file.html
BUT ONLY IF YOU HAVE TIME
Sorry for the time, here the source : https://www.sendspace.com/file/81hepx
|
