threadtear icon indicating copy to clipboard operation
threadtear copied to clipboard

Superblaubeere27 obfuscator support

Open dinosaurlover277 opened this issue 4 years ago • 4 comments

Describe what's not working Hi this is a request for Proguard Deobfuscation as the current included methods do not work.

Example snippit:

int[] var10002;
      switch(163<invokedynamic>()[lllllIlllIIllIl.54<invokedynamic>(lllllIlllIIllIl).164<invokedynamic>(lllllIlllIIllIl.54<invokedynamic>(lllllIlllIIllIl)).165<invokedynamic>(lllllIlllIIllIl.54<invokedynamic>(lllllIlllIIllIl).164<invokedynamic>(lllllIlllIIllIl.54<invokedynamic>(lllllIlllIIllIl)))]) {
      case 1:
         var10001 = lllllIlllIIllIl.73<invokedynamic>(lllllIlllIIllIl);
         var10002 = new int[llIII[3]];
         var10002[llIII[0]] = llIII[127];
         lllllIlllIIllIl.167<invokedynamic>(lllllIlllIIllIl, var10001.166<invokedynamic>(var10001, var10002));
         "".length();
         if (-" ".length() >= " ".length() << " ".length()) {
            return (boolean)((143 ^ 194 ^ (191 ^ 160) << (" ".length() << " ".length())) << " ".length() & (((37 ^ 118) << " ".length() ^ 148 + 0 - 57 + 60) << " ".length() ^ -" ".length()));
         }
         break;
      case 2:
         var10001 = lllllIlllIIllIl.73<invokedynamic>(lllllIlllIIllIl);
         var10002 = new int[llIII[3]];
         var10002[llIII[0]] = llIII[128];
         lllllIlllIIllIl.167<invokedynamic>(lllllIlllIIllIl, var10001.166<invokedynamic>(var10001, var10002));
         "".length();
         if (" ".length() << (" ".length() << " ".length()) < " ".length() << " ".length()) {
            return (boolean)((115 + 107 - 217 + 186 ^ (211 ^ 142) << " ".length()) << "   ".length() & (((18 ^ 11) << (" ".length() << " ".length()) ^ 112 ^ 17) << "   ".length() ^ -" ".length()));
         }
         break;
      case 3:
         var10001 = lllllIlllIIllIl.73<invokedynamic>(lllllIlllIIllIl);
         var10002 = new int[llIII[3]];
         var10002[llIII[0]] = llIII[129];
         lllllIlllIIllIl.167<invokedynamic>(lllllIlllIIllIl, var10001.166<invokedynamic>(var10001, var10002));
         "".length();
         if ((" ".length() << (" ".length() << " ".length()) & ~(" ".length() << (" ".length() << " ".length()))) > 0) {
            return (boolean)("   ".length() << (" ".length() << " ".length()) & ~("   ".length() << (" ".length() << " ".length())));
         }

or

private static void lllIll() {
      llIII = new int[570];
      llIII[0] = (187 ^ 152) & ~(46 ^ 13);
      llIII[1] = "   ".length() << (" ".length() << " ".length());
      llIII[2] = ((75 ^ 110) << "   ".length()) + (164 + 152 - 192 + 189 << " ".length()) - (499 + 440 - 628 + 268) + ((118 ^ 1) << (" ".length() << " ".length())) << (13 ^ 126 ^ (137 ^ 178) << " ".length());
      llIII[3] = " ".length();
      llIII[4] = (86 + 49 - 125 + 125 << (" ".length() << " ".length())) + (166 + 17 - 169 + 239 << (" ".length() << " ".length())) - (221 + 39 - 256 + 351 << (" ".length() << " ".length())) + 592 + 342 - -327 + 244 << (" ".length() << (" ".length() << " ".length()));
      llIII[5] = " ".length() << " ".length();
      llIII[6] = 19636 + 350 - 17373 + 23578;
      llIII[7] = "   ".length();
      llIII[8] = (380 + 673 - 553 + 257 << (" ".length() << (" ".length() << " ".length()))) + (559 + 346 - -40 + 174 << (" ".length() << " ".length())) - (7840 + 4003 - 6684 + 4724) + (1252 + 754 - 681 + 1870 << " ".length()) << " ".length();
      llIII[9] = " ".length() << (" ".length() << " ".length());
      llIII[10] = (2994 + 2911 - 3415 + 3355 << (" ".length() << " ".length())) + 2033 + 13 - 758 + 11901 - (10057 + 29018 - 8500 + 5746) + 2286 + 1478 - -16609 + 5568;
      llIII[11] = 102 ^ 99;
      llIII[12] = 665 + 189 - 369 + 648 + 502 + 555 - 415 + 51 - -(772 + 606 - 76 + 119) + (300 + 90 - -227 + 208 << (" ".length() << " ".length())) << (" ".length() << " ".length());
      llIII[13] = "   ".length() << " ".length();
      llIII[14] = (2466 + 1873 - 2544 + 1248 << (" ".length() << " ".length())) + 1087 + 919 - 1149 + 752 - -(29 + 364 - 308 + 348) + 6612 + 6087 - 10152 + 9426;
      llIII[15] = 130 ^ 133;

Java archive The jar archive that is not deobfuscated successfully. (Make sure you have the rights for it!) Here are files you can use for reference.

https://mega.nz/folder/MVIW1ToC#SQfIM27ySJmoiahB2MLtdA

dinosaurlover277 avatar Dec 27 '20 23:12 dinosaurlover277

that isn't proguard, that's superblaubeere's obfuscator

toxamin avatar Jan 06 '21 11:01 toxamin

Is there any plan on getting to this issue in the near future?

post04 avatar Apr 08 '21 22:04 post04

Oma is right use Java DeObfuscator

PaceCodes avatar Jul 31 '21 10:07 PaceCodes