/dobc

dobc:反混淆编译器

Primary LanguageC

dobc

  1. dobc now only work success in Windows10 and VS2017.
  2. dobc now only work success in thumb mode so.

Build

mkdir build
cd build
cmake ..
msbuild dobc.sln

Usage

show help

dobc -help

de-ollvm one function in one so library

dobc -d [funcaddr] [soname] -o output.so 

de-ollvm one so library

dobc soname -o output.so

APK be de-obfusation

Some APK test by manual, becuase auto-test hard to work close-source so。

APK desc ollvm-so so-md5 decode-so func
斗鱼 libmakeurl 2f0a73a9509eb0599aca9c298016ee9 libmakeurl.so.d 0x342d 0x407d 0x367d 0x15521 0x366f5
抖音 libcms 1d8f011a1a53b2b7bd73aed5ebe62142 libcms.so.d
快手 libqsmain 2f0a73a9509eb0599aca9c298016ee9 libqsmain.so.d 0xcb59
libqsmain bf8035a0f4c9680a9b53eb225bbe12fd libqsmain.so.d 0xc061 0x3e551
liblazarus liblazarus liblazarus.so.d 0x15f09 0x132ed

Unit Tests

ollvm-so so-md5 decode-so func
md5 libmd5.so 2f0a73a9509eb0599aca9c298016ee9 libmd5.so.d md5Update, md5Final
md4 libmd4.so 1d8f011a1a53b2b7bd73aed5ebe62142 libmd4.so.d md4Update, md4Final
sha256 libsha256.so 2f0a73a9509eb0599aca9c298016ee9 libsha256.so.d encrypt
sha512 libsha512.so 2f0a73a9509eb0599aca9c298016ee9 libsha512.so.d encrypt
base64 libbase64.so libbase64.so.d base64_encode, base64_decode
fft libfft.so libfft.so.d encode
yuv2gb libyuv2rgb.so libyuv2rgb.so.d encode
insertsort libinsertsort.so libinsert.so
quicksort libquicksort.so libquicksort.so
twosum libtwosum.so libtwosum.so.d leetcode
avl libavl.so libavl.so.d
astar libastar.so libastar.so.d
binsearch libbinsearch.so libbinsearch.so.d