Luac decoder [Multi Theft Auto / luac.mtasa.com]

[Zako]

Hey aluigi, The decoder works fine but sometimes it fails to remove the encryption. Here is an example.

Most of the time it works and the code looks like this after I remove the encryption. As you can see, some of the coding is readable:


And with some files I'm getting a result like this which looks differend and there is nothing to read in it:


When the second picture is the case, I am not able to uncompile this file. It looks like the decoder fails to remove the encryption of it. Maybe the decoder is is using wrong parameters for 'DeobfuscateScript'? Could to take a look at this?

Here is the file I used in the second picture:
https://easyupload.io/6ekebb

[lamjed001]

.
Hey aluigi, You must check this!

Code: Select all

QuickBMS generic files extractor and reimporter 0.12.0
by Luigi Auriemma
e-mail: me@aluigi.org
web:    aluigi.org
        (Aug 24 2022 - 10:55:28)

                          quickbms.com  Homepage
                            zenhax.com  ZenHAX Forum
                     @zenhax @quickbms  Twitter & Scripts

- GUI mode activated, remember that the tool works also from command-line
  where are available various options like folder scanning, filters and so on

- select BMS script. type ? for using the content of clipboard like a script
- select input archives/files, type * for the whole folder and subfolders
- select output folder where extracting files
- open input file C:\Users\User1\Desktop\test_dec\encoded\test.luac
- open script I:\MTA Luadec\luac_mtasa.bms
- set output folder C:\Users\User1\Desktop\test_dec

  offset   filesize   filename
--------------------------------------
- enter in folder C:\Users\User1\Desktop\test_dec\encoded
- open input file C:\Users\User1\Desktop\test_dec\encoded\netc.dll
DeobfuscateScript 0x00025af0

- the script needs to load a pre-compiled function from the dll or code
  pthread.dll
  do you want to continue with this and any other requested dll/code (y/N)?
  y
- library pthread.dll loaded at address 71A40000
- function found at offset 71A40000
- library netc.dll loaded at address 6F1C0000
- function found at offset 6F1E5AF0

-------------------
*EXCEPTION HANDLER*
-------------------
An error or crash occurred:

*EH* ExceptionCode      c0000005 access violation
*EH* ExceptionFlags     00000000
*EH* ExceptionAddress   6F1E5AF0
                        6F1C0000 + 00025af0 netc.dll
*EH* NumberParameters   00000002
*EH*                    00000000
*EH*                    8B00000C

Last script line before the error or that produced the error:
  27  calldll "netc.dll" DeobfuscateScript "__stdcall" RET MEMORY_FILE SIZE &RET_BUFF &RET_SIZE NAME
  coverage file 0   100%   1062       1062       . offset 00000000
  coverage file 1     2%   155648     5765656    . offset 00000000
  coverage file -1    0%   0          1062       . offset 00000000

Press ENTER or close the window to quit

[Noighty]

Hello there,

I think that maybe no one would help xD
but this is my first time using DLL files and that stuff

can anyone show me how to open the decryptor at the first place ? :/

Thanks