monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update detection and some strings

Browse Source
This commit is contained in:
de4dot 2011-10-07 17:30:41 +02:00
parent 4cca5190da
commit 8ec3da7080
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
de4dot.code/deobfuscators/Unknown/Deobfuscator.cs
View File

@ -72,8 +72,8 @@ namespace de4dot.deobfuscators.Unknown {
string scanTypes() { string scanTypes() {
foreach (var type in module.Types) { foreach (var type in module.Types) {
if (type.FullName == "BabelAttribute") if (type.FullName == "BabelAttribute" || type.FullName == "BabelObfuscatorAttribute")
return "Babel .NET"; return "Babel Obfuscator";
if (type.Namespace == "___codefort") if (type.Namespace == "___codefort")
return "CodeFort"; return "CodeFort";
if (type.FullName == "____KILL") if (type.FullName == "____KILL")
@ -81,7 +81,7 @@ namespace de4dot.deobfuscators.Unknown {
if (type.FullName == "CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute") if (type.FullName == "CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute")
return "Crypto Obfuscator"; return "Crypto Obfuscator";
if (type.FullName.Contains("ObfuscatedByGoliath")) if (type.FullName.Contains("ObfuscatedByGoliath"))
return "Goliath .NET"; return "Goliath .NET Obfuscator";
if (type.FullName == "Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode") if (type.FullName == "Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode")
return "Xenocode"; return "Xenocode";
if (type.FullName == "ZYXDNGuarder") if (type.FullName == "ZYXDNGuarder")
@ -91,7 +91,7 @@ namespace de4dot.deobfuscators.Unknown {
if (type.Name.Contains("();\t")) if (type.Name.Contains("();\t"))
return "Manco .NET Obfuscator"; return "Manco .NET Obfuscator";
if (Regex.IsMatch(type.FullName, @"^EMyPID_\d+_$")) if (Regex.IsMatch(type.FullName, @"^EMyPID_\d+_$"))
return "BitHelmet"; return "BitHelmet Obfuscator";
if (type.FullName == "NineRays.Decompiler.NotDecompile") if (type.FullName == "NineRays.Decompiler.NotDecompile")
return "Spices.Net Obfuscator"; return "Spices.Net Obfuscator";
if (type.FullName == "YanoAttribute") if (type.FullName == "YanoAttribute")