GCWizard icon indicating copy to clipboard operation
GCWizard copied to clipboard

WIG Analyzer - deal with multiple obfuscation functions

Open t-m-z opened this issue 8 months ago • 0 comments

https://coord.info/GC9RK2H

function zYO(str) local res = "" local dtable = "\000\001\002\003\004\005\006\a\b\t\n\v\f\r\014\015\016\017\018\019\020\021\022\023\024\025\026\027\028\029\030\031 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^`abcdefghijklmnopqrstuvwxyz{|}~" for i = 1, #str do local b = str:byte(i) if b > 0 and b <= 127 then res = res .. string.char(dtable:byte(b)) else res = res .. string.char(b) end end return res end

function _DecStr(str) local res = "" local dtable = "1\024\022>\nUB6mF\b\f_J~?L\0053k\003svM!\001He%\0214*n\015d\029oN(i2\026KAj\\004\017xTptVy-+'bz&\028"\025E\vf|S\r.[q{\027cI\016]^C$l<X/h\031) 7O8aw\t5,W#@\019\014D\a\0029Y=\023:\000\018Q`\030R0P\006u}G\020rg;Z" for i = 1, #str do local b = str:byte(i) if b > 0 and b <= 127 then res = res .. string.char(dtable:byte(b)) else res = res .. string.char(b) end end return res

t-m-z avatar Jun 23 '24 21:06 t-m-z