From fafa60c4c958de1bca9e31d441534ebe9f613112 Mon Sep 17 00:00:00 2001 From: de4dot Date: Sat, 10 Mar 2012 05:30:57 +0100 Subject: [PATCH] Update expressions --- de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs b/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs index 6b0ff789..4839f429 100644 --- a/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs +++ b/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs @@ -335,7 +335,7 @@ namespace de4dot.code.deobfuscators.Eazfuscator_NET { static void decrypt1(byte[] dest, byte[] key) { byte b = (byte)((key[1] + 7) ^ (dest.Length + 11)); - uint lcg = (uint)((key[0] | key[2] << 8) + (b << 3)); + uint lcg = (uint)((key[0] | (key[2] << 8)) + (b << 3)); b += 3; ushort xn = 0; for (int i = 0; i < dest.Length; i++) { @@ -344,7 +344,7 @@ namespace de4dot.code.deobfuscators.Eazfuscator_NET { xn = (ushort)(lcg >> 16); } byte tmp = dest[i]; - dest[i] ^= (byte)(key[1] ^ (byte)xn ^ b); + dest[i] ^= (byte)(key[1] ^ xn ^ b); b = (byte)(tmp + 3); xn >>= 8; }