Advertisement
Guest User

def wrong

a guest
Jun 24th, 2019
83
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.68 KB | None | 0 0
  1. switch (opcode)
  2. {
  3. case 0x14u: { // OP_JMP
  4. cout << "OP_JMP Before: " << L_Inst << endl;
  5. int v1 = _rotl(Inst, 9); //__ROL4__
  6. int v2 = _rotr(Inst, 6); //__ROR4__
  7. v1 ^= -10065 / Inst & 0x3FFFF ^ v2;
  8. v1 ^= Inst;
  9. L_Inst = v1;
  10. cout << "OP_JMP: " << L_Inst << endl;
  11. break;
  12. }
  13. case 5u: { // OP_SETUPVAL
  14. cout << "OP_SETUPVAL Before: " << L_Inst << endl;
  15. int v1 = _rotl(Inst, 13); //__ROL4__
  16. int v2 = _rotr(Inst, 7); //__ROR4__
  17. v1 ^= 9837702 / Inst & 0x3FC01FF ^ v2;
  18. v1 ^= Inst;
  19. L_Inst = v1;
  20. cout << "OP_SETUPVAL: " << L_Inst << endl;
  21. break;
  22. }
  23. case 0x1Fu: { // OP_CALL
  24. cout << "OP_CALL Before: " << L_Inst << endl;
  25. int v1 = Inst + 29799480 / Inst + *(DWORD*)ScanAddress(0x541B9F);
  26. int v2 = (Inst - 32757935 / Inst) ^ v1;
  27. L_Inst = (Inst >> 26) | v2 & 0x3FFFFFF;
  28. cout << "OP_CALL: " << L_Inst << endl;
  29. break;
  30. }
  31. case 0x25u: { // OP_CCLOSURE
  32. cout << "OP_CCLOSURE Before: " << L_Inst << endl;
  33. int v1 = Inst + 29408451 - 32757935 / Inst;
  34. L_Inst = (Inst >> 26) | ((Inst - 9837702 / Inst) ^ v1) & 0x3FFFFFF;
  35. cout << "OP_CCLOSURE: " << L_Inst << endl;
  36. break;
  37. }
  38. case 0x1Bu: // OP_TAILCALL
  39. case 0x22u: { // OP_RETURN
  40. cout << "OP_RETURN/OP_TAILCALL Before: " << L_Inst << endl;
  41. int v1 = (Inst << 26 >> 26) | ((Inst / Inst + *(DWORD*)ScanAddress(0x541B9F)) ^ (Inst / (*(DWORD*)ScanAddress(0x1F3D8AF) - Inst) + *(DWORD*)ScanAddress(0x1C0BCC3))) & 0x3FFFFFF;
  42. L_Inst = v1;
  43. cout << "OP_RETURN/OP_TAILCALL: " << L_Inst << endl;
  44. break;
  45. }
  46. default:
  47. cout << "No Encryption: " << opcode << endl;
  48. //L_Inst = Inst;
  49. break;
  50. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement