String Decryption
D810G detects and decrypts OLLVM-encrypted strings using multiple decryption methods.
Supported Methods
| Method |
Description |
| Single-byte XOR |
Try all 256 keys |
| Multi-byte XOR |
Frequency analysis to recover key |
| XOR with index |
byte[i] ^= key ^ i |
| RC4 |
Stream cipher brute-force |
| ROT-N |
All 255 rotations |
| Substitution table |
Custom 256-byte lookup |
How It Works
- Scan sections (
.data, .rodata) for high-entropy regions
- Try all decryption methods on each candidate
- Score results by printable character ratio
- Rank and return top candidates
← Back to Home