monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Rename method

Browse Source
This commit is contained in:
de4dot 2012-02-07 00:42:32 +01:00
parent 2ccb35afb0
commit ad8a5078fe
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
de4dot.code/deobfuscators/CodeVeil/v3_v4/MethodsDecrypter.cs
View File

@ -194,10 +194,10 @@ namespace de4dot.code.deobfuscators.CodeVeil.v3_v4 {
fileDataReader.BaseStream.Position = codeOffset; fileDataReader.BaseStream.Position = codeOffset;
if (fileDataReader.ReadByte() != 0x2A) if (fileDataReader.ReadByte() != 0x2A)
continue; // Not a RET continue; // Not a RET
int methodsDataOffset = DeobUtils.readVariableLengthInteger(fileDataReader); int methodsDataOffset = DeobUtils.readVariableLengthInt32(fileDataReader);
methodsDataReader.BaseStream.Position = methodsDataOffset; methodsDataReader.BaseStream.Position = methodsDataOffset;
dm.mhCodeSize = (uint)DeobUtils.readVariableLengthInteger(methodsDataReader); dm.mhCodeSize = (uint)DeobUtils.readVariableLengthInt32(methodsDataReader);
dm.code = methodsDataReader.ReadBytes((int)dm.mhCodeSize); dm.code = methodsDataReader.ReadBytes((int)dm.mhCodeSize);
if ((dm.mhFlags & 8) != 0) if ((dm.mhFlags & 8) != 0)
dm.extraSections = readExtraSections(methodsDataReader); dm.extraSections = readExtraSections(methodsDataReader);
@ -270,7 +270,7 @@ namespace de4dot.code.deobfuscators.CodeVeil.v3_v4 {
continue; continue;
reader.BaseStream.Position = section.pointerToRawData + relOffs; reader.BaseStream.Position = section.pointerToRawData + relOffs;
int size = DeobUtils.readVariableLengthInteger(reader); int size = DeobUtils.readVariableLengthInt32(reader);
int endOffset = relOffs + size; int endOffset = relOffs + size;
if (endOffset < relOffs || endOffset > section.sizeOfRawData) if (endOffset < relOffs || endOffset > section.sizeOfRawData)
continue; continue;

6
de4dot.code/deobfuscators/CodeVeil/v3_v4/StringDecrypter.cs
View File

@ -189,12 +189,12 @@ namespace de4dot.code.deobfuscators.CodeVeil.v3_v4 {
var inflated = DeobUtils.inflate(decryptedData, 0, decryptedData.Length, true); var inflated = DeobUtils.inflate(decryptedData, 0, decryptedData.Length, true);
var reader = new BinaryReader(new MemoryStream(inflated)); var reader = new BinaryReader(new MemoryStream(inflated));
int deflatedLength = DeobUtils.readVariableLengthInteger(reader); int deflatedLength = DeobUtils.readVariableLengthInt32(reader);
int numStrings = DeobUtils.readVariableLengthInteger(reader); int numStrings = DeobUtils.readVariableLengthInt32(reader);
decryptedStrings = new string[numStrings]; decryptedStrings = new string[numStrings];
var offsets = new int[numStrings]; var offsets = new int[numStrings];
for (int i = 0; i < numStrings; i++) for (int i = 0; i < numStrings; i++)
offsets[i] = DeobUtils.readVariableLengthInteger(reader); offsets[i] = DeobUtils.readVariableLengthInt32(reader);
int startOffset = (int)reader.BaseStream.Position; int startOffset = (int)reader.BaseStream.Position;
for (int i = 0; i < numStrings; i++) { for (int i = 0; i < numStrings; i++) {
reader.BaseStream.Position = startOffset + offsets[i]; reader.BaseStream.Position = startOffset + offsets[i];

2
de4dot.code/deobfuscators/DeobUtils.cs
View File

@ -150,7 +150,7 @@ namespace de4dot.code.deobfuscators {
return null; return null;
} }
public static int readVariableLengthInteger(BinaryReader reader) { public static int readVariableLengthInt32(BinaryReader reader) {
byte b = reader.ReadByte(); byte b = reader.ReadByte();
if ((b & 0x80) == 0) if ((b & 0x80) == 0)
return b; return b;