public static LsaDecryptor.LsaKeys LsaDecryptor(Program.MiniDump minidump, lsaTemplate_NT6.LsaTemplate_NT6 template) { LsaDecryptor.LsaKeys LsaKeys = new LsaDecryptor.LsaKeys(); acquire_crypto_material(minidump, template, ref LsaKeys); return(LsaKeys); }
public static void acquire_crypto_material(Program.MiniDump minidump, lsaTemplate_NT6.LsaTemplate_NT6 template, ref LsaDecryptor.LsaKeys LsaKeys) { //Console.WriteLine("Acquireing crypto stuff..."); long sigpos = find_signature(minidump, template); minidump.fileBinaryReader.BaseStream.Seek(sigpos, 0); LsaKeys.iv = get_IV(minidump, sigpos, template); LsaKeys.des_key = get_des_key(minidump, sigpos, template); LsaKeys.aes_key = get_aes_key(minidump, sigpos, template); }