Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- switch (opcode)
- {
- case 0x14u: { // OP_JMP
- cout << "OP_JMP Before: " << L_Inst << endl;
- int v1 = _rotl(Inst, 9); //__ROL4__
- int v2 = _rotr(Inst, 6); //__ROR4__
- v1 ^= -10065 / Inst & 0x3FFFF ^ v2;
- v1 ^= Inst;
- L_Inst = v1;
- cout << "OP_JMP: " << L_Inst << endl;
- break;
- }
- case 5u: { // OP_SETUPVAL
- cout << "OP_SETUPVAL Before: " << L_Inst << endl;
- int v1 = _rotl(Inst, 13); //__ROL4__
- int v2 = _rotr(Inst, 7); //__ROR4__
- v1 ^= 9837702 / Inst & 0x3FC01FF ^ v2;
- v1 ^= Inst;
- L_Inst = v1;
- cout << "OP_SETUPVAL: " << L_Inst << endl;
- break;
- }
- case 0x1Fu: { // OP_CALL
- cout << "OP_CALL Before: " << L_Inst << endl;
- int v1 = Inst + 29799480 / Inst + *(DWORD*)ScanAddress(0x541B9F);
- int v2 = (Inst - 32757935 / Inst) ^ v1;
- L_Inst = (Inst >> 26) | v2 & 0x3FFFFFF;
- cout << "OP_CALL: " << L_Inst << endl;
- break;
- }
- case 0x25u: { // OP_CCLOSURE
- cout << "OP_CCLOSURE Before: " << L_Inst << endl;
- int v1 = Inst + 29408451 - 32757935 / Inst;
- L_Inst = (Inst >> 26) | ((Inst - 9837702 / Inst) ^ v1) & 0x3FFFFFF;
- cout << "OP_CCLOSURE: " << L_Inst << endl;
- break;
- }
- case 0x1Bu: // OP_TAILCALL
- case 0x22u: { // OP_RETURN
- cout << "OP_RETURN/OP_TAILCALL Before: " << L_Inst << endl;
- int v1 = (Inst << 26 >> 26) | ((Inst / Inst + *(DWORD*)ScanAddress(0x541B9F)) ^ (Inst / (*(DWORD*)ScanAddress(0x1F3D8AF) - Inst) + *(DWORD*)ScanAddress(0x1C0BCC3))) & 0x3FFFFFF;
- L_Inst = v1;
- cout << "OP_RETURN/OP_TAILCALL: " << L_Inst << endl;
- break;
- }
- default:
- cout << "No Encryption: " << opcode << endl;
- //L_Inst = Inst;
- break;
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement