View Full Version : Need help with reverse engineering a dll which obfuscator by Xenocode
cchitsiang
12-24-2009, 07:23 AM
I do not have knowledge about Deobfuscator..
can anyone help me to deobfuscator this dll?
This dll is proctected by Xenocode as I know.
The dll file at here:
http://hotfile.com/dl/21351895/e2e5e1c/a.dll.html
THANKS FIRST:)
best regards,
cchitsiang
[please don't reply to yourself, use the Edit button]
can you know why nobody come to this post?:confused:
gnerogeem
12-24-2009, 08:37 AM
Here (http://www.reteam.org/board/search.php) it is.
cchitsiang
01-05-2010, 04:18 AM
hi,
I had go to Search there to take a look..but seem like nobody familiar with Xenocode obfuscation.
Inside the dll, I can see the code, I can make sure some of xXXXX is what value like
xb7dfc13308b54974 = components
x85601834555fb7d5 = InitializeComponent
I really want to know that the Xenocode obfuscate is follow a logic or just randomly rename the method, variables and so on?
Who can answer me the question...Really appreciate it...
Best Regards
Kurapica
01-05-2010, 06:11 AM
I really want to know that the Xenocode obfuscate is follow a logic or just randomly rename the method, variables and so on?
Who can answer me the question...Really appreciate it...
Only Xenocode developers can answer this question.
cchitsiang
01-05-2010, 09:51 AM
Hi Kurapica,
Sorry for my stupid question. I will ask that kind question because I though that got anyone understand the logic beside Rongchaua that write a Deobfuscator for Xenocode called XeCoString.
Anyway, I will continue try my best to figure out to deobfuscate that dll.
vBulletin® v3.6.4, Copyright ©2000-2015, Jelsoft Enterprises Ltd.