monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change method sig to take a IPEImage instead of a PEImage

Browse Source
This commit is contained in:
de4dot 2012-11-09 11:34:23 +01:00
parent d47a03f51a
commit 73e15c0919
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
de4dot.code/deobfuscators/Agile_NET/Deobfuscator.cs
View File

@ -118,12 +118,12 @@ namespace de4dot.code.deobfuscators.Agile_NET {
base.init(module);
}
public override byte[] unpackNativeFile(PEImage peImage) {
public override byte[] unpackNativeFile(IPEImage peImage) {
return unpackNativeFile1(peImage) ?? unpackNativeFile2(peImage);
}
// Old CS versions
byte[] unpackNativeFile1(PEImage peImage) {
byte[] unpackNativeFile1(IPEImage peImage) {
const int dataDirNum = 6; // debug dir
const int dotNetDirNum = 14;
@ -146,7 +146,7 @@ namespace de4dot.code.deobfuscators.Agile_NET {
}
// CS 1.x
byte[] unpackNativeFile2(PEImage peImage) {
byte[] unpackNativeFile2(IPEImage peImage) {
var resources = peImage.Win32Resources;
if (resources == null)
return null;

2
de4dot.code/deobfuscators/DeobfuscatorBase.cs
View File

@ -112,7 +112,7 @@ namespace de4dot.code.deobfuscators {
DefaultDecrypterType = DecrypterType.Static;
}
public virtual byte[] unpackNativeFile(PEImage peImage) {
public virtual byte[] unpackNativeFile(IPEImage peImage) {
return null;
}

2
de4dot.code/deobfuscators/IDeobfuscator.cs
View File

@ -67,7 +67,7 @@ namespace de4dot.code.deobfuscators {
IDeobfuscatedFile DeobfuscatedFile { get; set; }
// Returns null or the unpacked .NET PE file
byte[] unpackNativeFile(PEImage peImage);
byte[] unpackNativeFile(IPEImage peImage);
void init(ModuleDefMD module);