unshc Stuck at [11] Working with var address at offset [0x6025e2] (0x187f8 bytes)

[akashdiware]

I am trying to decrypt my encrypted shell file but unshc utility stucked at following line

---

| | | | / | | | |
| | | | \ --.| |_| | ___ | | | | '_ \--. \ _ |/ | | || | | | /_/ / | | | (_ \/|| |_/_| |/_|

--- UnSHc - The shc decrypter. --- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc Original idea from Luiz Octavio Duarte (LOD) Updated and modernized by Yann CAM

• SHc : [http://www.datsi.fi.upm.es/~frosal/]

• UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[] Input file name to decrypt [mumarainstaller6.sh.x] [+] ARC4 address call candidate : [0x400c10] [] Extracting each args address and size for the 14 arc4() calls with address [0x400c10]... [0] Working with var address at offset [0x62087d] (0x2a bytes) [1] Working with var address at offset [0x601a38] (0x1 bytes) [2] Working with var address at offset [0x601a2c] (0xa bytes) [3] Working with var address at offset [0x601a4e] (0x3 bytes) [4] Working with var address at offset [0x601a3c] (0xf bytes) [5] Working with var address at offset [0x601a39] (0x1 bytes) [6] Working with var address at offset [0x6019f9] (0x16 bytes) [7] Working with var address at offset [0x601a13] (0x16 bytes) [8] Working with var address at offset [0x6019e1] (0x13 bytes) [9] Working with var address at offset [0x601a37] (0x1 bytes) [10] Working with var address at offset [0x601a51] (0x1 bytes) [11] Working with var address at offset [0x6025e2] (0x187f8 bytes)

Please help to resolve this issue....

[yanncam]

Hello,

Which version of shc do you use ? Please read : https://github.com/yanncam/UnSHc/issues/31

Sincerely,