CryptoX/decrypt.c at master · Shadow-Network/CryptoX · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

#include "decrypt.h"

#define COMPARE(A,B,C,D,E,F) string[a] == A || string[a] == B                \
   || string[a] == C || string[a] == D || string[a] == E || string[a] == F   \

int decrypt(char * string)
{
   char ca, *cb, *cd, * temporary_a, * temporary_b, * temporary_c;
   int a, b, c, d, e, global_key = 0, key = 0, length = MAX_PATH, result = False;

   if ((temporary_a = (char *)malloc(strlen(string))) == NULL) return result;
   if ((temporary_b = (char *)malloc(length)) == NULL) return result;
   if ((temporary_c = (char *)malloc(length)) == NULL) return result;

   // Faz reverso da ofuscação...
   for (a = 0; string[a] != '\0' ; a++)
   {
      if      (COMPARE('A', 'D', 'a', 'n', '}', ';')) string[a] = 'D';
      else if (COMPARE('E', 'H', 'o', 'p', '@', '.')) string[a] = 'M';
      else if (COMPARE('I', 'R', 'z', 'f', '&', ',')) string[a] = 'R';
      else if (COMPARE('B', 'K', 'j', 'k', '#', ':')) string[a] = '0';
      else if (COMPARE('F', 'S', 'q', 't', ')', '^')) string[a] = '1';
      else if (COMPARE('L', 'M', 'e', 'y', '-', '_')) string[a] = '2';
      else if (COMPARE('O', 'U', 'r', 'b', '*', '?')) string[a] = '3';
      else if (COMPARE('Q', 'T', 'i', 's', '%', '/')) string[a] = '4';
      else if (COMPARE('J', 'Y', 'm', 'l', '$', '>')) string[a] = '5';
      else if (COMPARE('C', 'N', 'u', 'v', '(', '[')) string[a] = '6';
      else if (COMPARE('W', 'V', 'c', 'd', '+', '!')) string[a] = '7';
      else if (COMPARE('G', 'P', 'w', 'x', '{', '~')) string[a] = '8';
      else if (COMPARE('X', 'Z', 'g', 'h', '=', '<')) string[a] = '9';
   }

   // Parseia string...
   for (a = 0; string[a] != '\0' ; a++)
   {
      if (a == 4)
      {
         temporary_a[a] = '\0';
         break;
      }
      temporary_a[a] = string[a];
   }
   temporary_a[a] = '\0';

   for (a = strlen(string) - 4, b = 0; string[a] != '\0' ; a++, b++)
   {
      temporary_b[b] = string[a];
   }
   temporary_b[b] = '\0';

   memset(temporary_c, 0x00, length);
   sprintf_s(temporary_c, length - 1, "%s%s", temporary_b, temporary_a);
   global_key = (int)strtol(temporary_c, (char **)0, 10);

   for (a = 4, b = 0; a < (int)(strlen(string) - 4); a++, b++)
   {
      string[b] = string[a];
   }
   string[b] = '\0';

   // Decoda string...
   for (a = 0, b = 0, d = 0, e = 0, c = strlen(string); a <= c; ++a)
   {
      if (isalpha(string[a])) ca = string[a];

      else if (isdigit(string[a]))
      {
         cb = string + a;
         cd = NULL;
         key = strtol(cb, &cd, 10);

         if (ca == 'M')
         {
            e = global_key - key;
            global_key = e;
            temporary_a[d] = e;
            d++;
         }
         else if (ca == 'D')
         {
            e = global_key + key;
            global_key = e;
            temporary_a[d] = e;
            d++;
         }
         else if (ca == 'R')
         {
            temporary_a[d] = e;
            d++;
         }
         a += cd - cb - 1;
      }
   }

   strcpy(string, temporary_a);

   result = True;
   free(temporary_a);
   free(temporary_b);
   free(temporary_c);
   return result;
}