monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove duplicate resources

Browse Source
This commit is contained in:
de4dot 2012-07-23 10:22:39 +02:00
parent 278e62a4b3
commit 6c04a950e7
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
de4dot.code/deobfuscators/MaxtoCode/Deobfuscator.cs
View File

@ -138,6 +138,7 @@ namespace de4dot.code.deobfuscators.MaxtoCode {
addCctorInitCallToBeRemoved(method);
addTypeToBeRemoved(mainType.Type, "Obfuscator type");
addModuleReferencesToBeRemoved(mainType.ModuleReferences, "MC runtime module reference");
removeDuplicateEmbeddedResources();
}
static Encoding getEncoding(int cp) {
@ -149,6 +150,43 @@ namespace de4dot.code.deobfuscators.MaxtoCode {
}
}
void removeDuplicateEmbeddedResources() {
var resources = new Dictionary<uint, List<EmbeddedResource>>();
foreach (var tmp in module.Resources) {
var rsrc = tmp as EmbeddedResource;
if (rsrc == null)
continue;
if (rsrc.Offset == null)
continue;
List<EmbeddedResource> list;
if (!resources.TryGetValue(rsrc.Offset.Value, out list))
resources[rsrc.Offset.Value] = list = new List<EmbeddedResource>();
list.Add(rsrc);
}
foreach (var list in resources.Values) {
if (list.Count <= 1)
continue;
EmbeddedResource resourceToKeep = null;
foreach (var rsrc in list) {
if (string.IsNullOrEmpty(rsrc.Name))
continue;
resourceToKeep = rsrc;
break;
}
if (resourceToKeep == null)
continue;
foreach (var rsrc in list) {
if (rsrc == resourceToKeep)
continue;
addResourceToBeRemoved(rsrc, string.Format("Duplicate of resource {0}", Utils.toCsharpString(resourceToKeep.Name)));
}
}
}
public override IEnumerable<int> getStringDecrypterMethods() {
var list = new List<int>();
if (stringDecrypter != null && stringDecrypter.Detected)