Michael Brunner

Results 84 comments of Michael Brunner

Try to use commit 18425c9a1890b78b3c785a86dbb0b7cd22ded667. There was a bug that blocked reflection where it shouldn't get blocked.

Seems like it is a variant of ZKM invokedynamic obfuscation that doesn't take (J), but instead takes (IJ). I can try to implement that.

I tried to implement this variant of invokedynamics but it seems like there are some classes missing in your file and therefore it cannot be decrypted :/

Which obfuscator and version is it?

I will have to update the regex for ZKM_INVOKEDYNAMIC_REAL_BOOTSTRAP_DESC. Seems like ZKM implemented multiple decryption longs / ints. You can add a long as last parameter to ZKM_INVOKEDYNAMIC_REAL_BOOTSTRAP_DESC and your...

Please test if it works.

Improved it to about 42%. Decryption class often throws NPEs -> i think the cause is that there are some class files / libraries missing.

Fixed a bug that caused encrypted references with longs or ints as first arguments to fail decryption

> > > > I am writing to you again asking for help in decrypting ZKM. Here is the link: https://workupload.com/file/ZhbjSnnnb5K > > The following jar uses ZKM's method parameter...

I only fixed the analyzer bugs, I didn't implement ZKM 13+ support yet