nable to extract addresses of 14 arc4 args with ARC4 address call [0x4005d0]...

[beserious]

Hi

I am getting error nable to extract addresses of 14 arc4 args with ARC4 address call [0x4005d0]...
sh unshc.sh -a 4005d0 -o sss.sh.x

---

| | | | / | | | |
| | | | __ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __|
| || | | | /_/ / | | | (__
_/|| |_/_| |/___|

--- UnSHc - The shc decrypter.
--- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc
Original idea from Luiz Octavio Duarte (LOD)
Updated and modernized by Yann CAM

• SHc : [http://www.datsi.fi.upm.es/~frosal/]
• UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

---

[+] ARC4() offset function call address specified [0x4005d0]
[+] Output file name specified [interspireinstaller7.sh.x]
/usr/bin/objdump: 'a.out': No such file
/usr/bin/objdump: 'a.out': No such file
[] Extracting each args address and size for the 14 arc4() calls with address [0x4005d0]...
[-] Unable to extract addresses of 14 arc4 args with ARC4 address call [0x4005d0]...
[] Extracting password...
Usage: /usr/bin/grep [OPTION]... PATTERN [FILE]...
Try '/usr/bin/grep --help' for more information.
Usage: /usr/bin/grep [OPTION]... PATTERN [FILE]...
Try '/usr/bin/grep --help' for more information.
Usage: /usr/bin/grep [OPTION]... PATTERN [FILE]...
Try '/usr/bin/grep --help' for more information.
Usage: /usr/bin/grep [OPTION]... PATTERN [FILE]...
Try '/usr/bin/grep --help' for more information.
Usage: /usr/bin/grep [OPTION]... PATTERN [FILE]...
Try '/usr/bin/grep --help' for more information.
[-] Error, function call previous first call of arc4() hasn't been identified...

Could you please help me...
test.sh.zip

[MrX3RO]

Same error,
even im getting
[-] Unable to define arc4() call address...
With on encrypted code.

[yanncam]

Hello,

The objdump command doesn't seem to work on your system. this package is installed ? Do you try to run UnSHc in a directory with write permission ?

Sincerely,

[gaamaaresosa]

Me also get in all 6 linux system I tried with latest unshc v0.8
(I tried older version also)
I simply project, unprotect and check.

All linux are updated.
(Ubuntu 20.04, Windows10 Ubuntu 20.04, Windows Kali Linux, Raspberry Pi 3 B+)

@ubuntu:~/shc/shc-3.8.9$ objdump -v
GNU objdump (GNU Binutils for Ubuntu) 2.34

@ubuntu:/usr/bin$ ls -l objdump
lrwxrwxrwx 1 root root 24 Apr 7 2020 objdump -> x86_64-linux-gnu-objdump

What else we could do ?

As an expert please give us a solid solution.

[*] Input file name to decrypt [sample.sh.x]
[+] Output file name specified [sample.sh]
[-] Unable to define arc4() call address...

Thanks...