monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix invalid Mvid

Browse Source
This commit is contained in:
de4dot 2012-07-23 10:42:38 +02:00
parent 6c04a950e7
commit 8a81e98b3f
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
de4dot.code/deobfuscators/MPRESS/Deobfuscator.cs
View File

@ -19,6 +19,8 @@
using System;
using System.Collections.Generic;
using System.Security.Cryptography;
using System.Text;
using Mono.Cecil;
using Mono.MyStuff;
using de4dot.PE;
@ -236,6 +238,25 @@ namespace de4dot.code.deobfuscators.MPRESS {
return newOne;
}
public override void deobfuscateBegin() {
base.deobfuscateBegin();
fixInvalidMvid();
}
void fixInvalidMvid() {
if (module.Mvid == Guid.Empty) {
var hash = new SHA1Managed().ComputeHash(Encoding.UTF8.GetBytes(module.ToString()));
var guid = new Guid(BitConverter.ToInt32(hash, 0),
BitConverter.ToInt16(hash, 4),
BitConverter.ToInt16(hash, 6),
hash[8], hash[9], hash[10], hash[11],
hash[12], hash[13], hash[14], hash[15]);
Log.v("Updating MVID: {0}", guid.ToString("B"));
module.Mvid = guid;
}
}
public override IEnumerable<int> getStringDecrypterMethods() {
return new List<int>();
}