nulled file javascript, i will pay for this job

zana31 said:

dears ,

i have file javascript is allow to load only on localhost and not allowd to load on my website,
looking for someone to nulled and fix this file javascript
i will pay for this job

Click to expand...

alexmisaila said:

Share the file here, nobody will help you without details

Click to expand...

slvrsteele said:

I have the script but is highly obfuscated with variables minified (not by webpack). It's a huge work involved as none of the deobfuscators on the market can handle it so it have to be done manually

If you want I'll send you the files later

Click to expand...

slvrsteele said:

I have the script but is highly obfuscated with variables minified (not by webpack). It's a huge work involved as none of the deobfuscators on the market can handle it so it have to be done manually

If you want I'll send you the files later

Click to expand...

BonJoe said:

If you play around using different deobfuscation and unpacking methods you can get a "more readable" code like this:

http://paste.bingner.com/paste/tfn88

didn't bother spending more than 10 minutes, since clearly the people saying it is undecodable didn't either.

Click to expand...

slvrsteele said:

You are so awesome, how didn't I think of it?

Now identify and clear dead code, restore original functions and null it.

With your expertise won't take you longer than let's say not 10 but 20 minutes. Isn't that right?

Beside this file there are 2 more in the same situation. Fix this and I will share the others too

Edit: I don't remember anyone saying it's not decodable. Just hard work to do it up to a clean code

Second edit: why to have a clean code? Cause once you have the code and learn the mechanics you won't need to decode future versions to null it. Less work on long term.

Click to expand...

 for (; args.J5D(gasEstimates.toString(), gasEstimates.toString().length, "96642" ^ 0) !== A9z; gasEstimates++) {
        date = "generatio";
        date = date + "nDate";
        packageType = '["127.0.0.1","localhost","chartiq.c';
        packageType = packageType + 'om"]';
        code = "do";
        code = code + "main";
        code = code + "Lo";
        code = code + "ck";
        h27 = "20";
        h27 = h27 + "22-10-24T16";
        h27 = h27 + ":18:15.098Z";
        utils.packageInfo = Object.freeze({
            "version": "generationDate",
            "generationDate": h27,
            "clientName": code,
            "packageType": packageType,
            "licenseType": "version",
            "expirationDate": date,
            "domainLock": "licenseType",
            "iframeLock": "domainLock"
        });
        utils.suppressPackageInfo = true;
        engineDate = engineDate + 2;
    }

        h27 = h27 + "22-10-24T16";

        h27 = h27 + ":18:15.098Z";

BonJoe said:

what is the purpose? Doing what I did, you simply find what you need to look for.

Click to expand...

BonJoe said:

and then you go ahead and use a bit of common sense and null it without needing to modify the code there. Before you go ahead and call me out again:

Code:

h27 = h27 + "22-10-24T16";

h27 = h27 + ":18:15.098Z";

What wil that be? A timestamp indicating the license time? Really? ohhh, impossible to null like this - or is it? Instead of seeing my post as an attack you should have just looked through what I posted.

Click to expand...

slvrsteele said:

I am sorry if I was jumpy and offended you despite your good intentions. But I have seen that code 7 different times with almost same results.






Because I don't believe that this code only have one obvious check. More than sure there is another check on it. I personally wouldn't leave my code like that. Or maybe I'm too paranoid. That's one of the reasons of restoring the original code.
If things can be done right then why not? A little bit of extra work didn't kill anyone. Yet.

Click to expand...

alexmisaila said:

This is my last deobfuscated code: *** Hidden text: cannot be quoted. ***


I've compared it with the @slvrsteele version and I saw is almost the same result, some little differences... I think is not possible to do more than that.

Click to expand...