monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Move (and rename) XXTEA decrypt func to DeobUtils

Browse Source
This commit is contained in:
de4dot 2012-02-06 08:22:55 +01:00
parent b867301797
commit da3a28f0a8
2 changed files with 21 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
de4dot.code/deobfuscators/CodeVeil/StringDecrypter.cs
View File

@ -183,7 +183,7 @@ namespace de4dot.code.deobfuscators.CodeVeil {
var encryptedData = new uint[data.Length / 4];
Buffer.BlockCopy(data, 0, encryptedData, 0, data.Length);
decryptXxtea(encryptedData, encryptedData.Length, key);
DeobUtils.xxteaDecrypt(encryptedData, encryptedData.Length, key);
var decryptedData = new byte[data.Length];
Buffer.BlockCopy(encryptedData, 0, decryptedData, 0, data.Length);
@ -202,26 +202,6 @@ namespace de4dot.code.deobfuscators.CodeVeil {
}
}
// Code converted from C implementation @ http://en.wikipedia.org/wiki/XXTEA (btea() func)
static void decryptXxtea(uint[] v, int n, uint[] key) {
const uint DELTA = 0x9E3779B9;
uint rounds = (uint)(6 + 52 / n);
uint sum = rounds * DELTA;
uint y = v[0];
uint z;
//#define MX (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)))
do {
int e = (int)((sum >> 2) & 3);
int p;
for (p = n - 1; p > 0; p--) {
z = v[p - 1];
y = v[p] -= (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)));
}
z = v[n - 1];
y = v[0] -= (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)));
} while ((sum -= DELTA) != 0);
}
public string decrypt(int index) {
return decryptedStrings[index];
}

20
de4dot.code/deobfuscators/DeobUtils.cs
View File

@ -90,6 +90,26 @@ namespace de4dot.code.deobfuscators {
}
}
// Code converted from C implementation @ http://en.wikipedia.org/wiki/XXTEA (btea() func)
public static void xxteaDecrypt(uint[] v, int n, uint[] key) {
const uint DELTA = 0x9E3779B9;
uint rounds = (uint)(6 + 52 / n);
uint sum = rounds * DELTA;
uint y = v[0];
uint z;
//#define MX (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)))
do {
int e = (int)((sum >> 2) & 3);
int p;
for (p = n - 1; p > 0; p--) {
z = v[p - 1];
y = v[p] -= (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)));
}
z = v[n - 1];
y = v[0] -= (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (key[(p & 3) ^ e] ^ z)));
} while ((sum -= DELTA) != 0);
}
public static string getExtension(ModuleKind kind) {
switch (kind) {
case ModuleKind.Dll: