monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change method sig to take a IPEImage instead of a PEImage

Browse Source
This commit is contained in:
de4dot 2012-11-09 11:34:23 +01:00
parent d47a03f51a
commit 73e15c0919
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
de4dot.code/deobfuscators/Agile_NET/Deobfuscator.cs
View File

@ -118,12 +118,12 @@ namespace de4dot.code.deobfuscators.Agile_NET {
base.init(module); base.init(module);
} }
public override byte[] unpackNativeFile(PEImage peImage) { public override byte[] unpackNativeFile(IPEImage peImage) {
return unpackNativeFile1(peImage) ?? unpackNativeFile2(peImage); return unpackNativeFile1(peImage) ?? unpackNativeFile2(peImage);
} }
// Old CS versions // Old CS versions
byte[] unpackNativeFile1(PEImage peImage) { byte[] unpackNativeFile1(IPEImage peImage) {
const int dataDirNum = 6; // debug dir const int dataDirNum = 6; // debug dir
const int dotNetDirNum = 14; const int dotNetDirNum = 14;
@ -146,7 +146,7 @@ namespace de4dot.code.deobfuscators.Agile_NET {
} }
// CS 1.x // CS 1.x
byte[] unpackNativeFile2(PEImage peImage) { byte[] unpackNativeFile2(IPEImage peImage) {
var resources = peImage.Win32Resources; var resources = peImage.Win32Resources;
if (resources == null) if (resources == null)
return null; return null;

2
de4dot.code/deobfuscators/DeobfuscatorBase.cs
View File

@ -112,7 +112,7 @@ namespace de4dot.code.deobfuscators {
DefaultDecrypterType = DecrypterType.Static; DefaultDecrypterType = DecrypterType.Static;
} }
public virtual byte[] unpackNativeFile(PEImage peImage) { public virtual byte[] unpackNativeFile(IPEImage peImage) {
return null; return null;
} }

2
de4dot.code/deobfuscators/IDeobfuscator.cs
View File

@ -67,7 +67,7 @@ namespace de4dot.code.deobfuscators {
IDeobfuscatedFile DeobfuscatedFile { get; set; } IDeobfuscatedFile DeobfuscatedFile { get; set; }
// Returns null or the unpacked .NET PE file // Returns null or the unpacked .NET PE file
byte[] unpackNativeFile(PEImage peImage); byte[] unpackNativeFile(IPEImage peImage);
void init(ModuleDefMD module); void init(ModuleDefMD module);