SychicBoy / NETReactorSlayer

An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor
https://www.CodeStrikers.org
GNU General Public License v3.0
964 stars 226 forks source link

Is it possible to decrypt string in those method by delegate #58

Closed gagmeng closed 1 year ago

gagmeng commented 1 year ago

The string decrypt method just like below. Tried with "de4dot xxx.exe --strtyp delegate --strtok 0600117A", but it didn't worked. // Token: 0x0600117A RID: 4474 RVA: 0x0004E274 File Offset: 0x0004C474 public bool method_20(Class151 class151_0) { XmlDocument xmlDocument = new XmlDocument(); this.Save(xmlDocument); return class151_0.method_1(xmlDocument, this.method_22(new byte[] { 236, 242, 240, 9, 250, 15, 14, 13, 254 })); }

// Token: 0x0600117E RID: 4478 RVA: 0x0004E670 File Offset: 0x0004C870 private string method_22(byte[] byte_0) { byte b = 18; byte b2 = 137; byte[] array = new byte[byte_0.Length]; Array.Copy(byte_0, array, byte_0.Length); int i; for (i = 0; i < array.Length; i++) { byte[] array2 = array; int num = i; array2[num] ^= b2; byte[] array3 = array; int num2 = i; array3[num2] -= b; if (array[i] == 0) { break; } } return Encoding.UTF8.GetString(array, 0, i); }