我需要任何可以解码“鲁拉夫混淆器”的人

问题描述 投票:-1回答:1

我付了一个不受信任的脚本开发人员。而且我以为他骗了我。他确实向我发送了代码,但他使脚本变得晦涩难懂。这是一款使用Lua的名为“ Roblox”的游戏,代码如下。通过运行可以看出,它可能会起作用。但是我需要更改脚本才能正常工作。有人知道解码混淆吗?

https://pastebin.com/B8SZmZGE

local ilIillllII1i1lliliI = assert local II1ll1iliIIIIillIli = select local lIlillIlIi11I1lIIi11I = tonumber local i1li1IIIII1IIilIil1 = unpack local iIl1IIlI11i1il1ilII = pcall local lIlI1IiiIlIl1i11ll1Il = setfenv local iIIlilIlllIliiIili1 = setmetatable local ii1Iiill11ii1IIIill = type local lIll1I1ll1lliilII1Il1 = getfenv local IiIi1llliiIIllllI1i = tostring local Ii1IIill1ilI1lilIiI = error local iilli1lIi11lllIli1l = string.sub local lIlI1li1ll1lliliIlI = string.byte local lIli1Ill1liIlilIIIiiI = string.char local I1ii1iIIl1lI1Iii1iI = string.rep local iiiIiI11IIllIiliI1I = string.gsub local illlIIIllliill1l1ll = string.match local iIi1l1liili1I11l1II = 1 local function lIll1iillI1ll1iiIiIll(IIiiiIiiIllIl1i1i1I, iIililIlliIII11illi) local i1iiI1I1iII1iiIiil1 IIiiiIiiIllIl1i1i1I = iiiIiI11IIllIiliI1I(iilli1lIi11lllIli1l(IIiiiIiiIllIl1i1i1I, 5), "..", function(llii1Ii11lI1llilill) if lIlI1li1ll1lliliIlI(llii1Ii11lI1llilill, 2) == 71 then i1iiI1I1iII1iiIiil1 = lIlillIlIi11I1lIIi11I(iilli1lIi11lllIli1l(llii1Ii11lI1llilill, 1, 1)) return
lua roblox deobfuscation
1个回答
0
投票

基本上,它使用字节码(\ 144 \ 22 \ 99 \ 88),但是它具有自定义解释器和自定义字节码vm,以使其具有如下所示的字节码:LPH|3EE5491D2B1A00192574A22B510A02002GE5E7E9E42GE5F53GE5F53GE5CD3GE5FDE42GE5C13GE5F934B71

因此,您需要将变量和函数重命名为variable1variable2之类的内容,以便您能够读取它。然后找到垃圾代码,例如

function 1iiii1i1i(i1i1ijj1jijij)
local 1j1j1jj1j1jijijij = (((10*2)/2)-3/9)
end
1iiii1i1i(90, 0)

这是完全没有用的,它旨在欺骗反编译器循环随机数函数。检查是否类似:iIi1l1liili1I11l1II = iIi1l1liili1I11l1II + 4 return Ii1IiI1I111I1II1IIi * 16777216 + iIII1iIiI1l1IlIIlii * 65536 + IIill111lli111ll1li * 256

这些都是垃圾代码,只需在其余代码中查找(使用ctrl+F),并查看其是否有用。如果有,请检查该用途是否有用途,依此类推,直到找到它是否属于虚拟机。事实是,它可能会多次加载另一个加载字符串,直到需要很长时间才能对其进行反编译。因此,如果您真的需要消息来源,请与我联系,并能引起您的注意(turtsis#2785)或在其中投入几个小时]

© www.soinside.com 2019 - 2024. All rights reserved.