monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add option to disable cast deobfuscation

Browse Source
This commit is contained in:
de4dot 2012-05-03 16:51:36 +02:00
parent ea205dcae8
commit b27e1b36af
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
de4dot.code/deobfuscators/DeepSea/Deobfuscator.cs
View File

@ -32,6 +32,7 @@ namespace de4dot.code.deobfuscators.DeepSea {
BoolOption dumpEmbeddedAssemblies; BoolOption dumpEmbeddedAssemblies;
BoolOption restoreFields; BoolOption restoreFields;
BoolOption renameResourceKeys; BoolOption renameResourceKeys;
BoolOption castDeobfuscation;
public DeobfuscatorInfo() public DeobfuscatorInfo()
: base() { : base() {
@ -41,6 +42,7 @@ namespace de4dot.code.deobfuscators.DeepSea {
dumpEmbeddedAssemblies = new BoolOption(null, makeArgName("embedded"), "Dump embedded assemblies", true); dumpEmbeddedAssemblies = new BoolOption(null, makeArgName("embedded"), "Dump embedded assemblies", true);
restoreFields = new BoolOption(null, makeArgName("fields"), "Restore fields", true); restoreFields = new BoolOption(null, makeArgName("fields"), "Restore fields", true);
renameResourceKeys = new BoolOption(null, makeArgName("keys"), "Rename resource keys", true); renameResourceKeys = new BoolOption(null, makeArgName("keys"), "Rename resource keys", true);
castDeobfuscation = new BoolOption(null, makeArgName("cast"), "Deobfuscate casts", true);
} }
public override string Name { public override string Name {
@ -60,6 +62,7 @@ namespace de4dot.code.deobfuscators.DeepSea {
DumpEmbeddedAssemblies = dumpEmbeddedAssemblies.get(), DumpEmbeddedAssemblies = dumpEmbeddedAssemblies.get(),
RestoreFields = restoreFields.get(), RestoreFields = restoreFields.get(),
RenameResourceKeys = renameResourceKeys.get(), RenameResourceKeys = renameResourceKeys.get(),
CastDeobfuscation = castDeobfuscation.get(),
}); });
} }
@ -71,6 +74,7 @@ namespace de4dot.code.deobfuscators.DeepSea {
dumpEmbeddedAssemblies, dumpEmbeddedAssemblies,
restoreFields, restoreFields,
renameResourceKeys, renameResourceKeys,
castDeobfuscation,
}; };
} }
} }
@ -93,6 +97,7 @@ namespace de4dot.code.deobfuscators.DeepSea {
public bool DumpEmbeddedAssemblies { get; set; } public bool DumpEmbeddedAssemblies { get; set; }
public bool RestoreFields { get; set; } public bool RestoreFields { get; set; }
public bool RenameResourceKeys { get; set; } public bool RenameResourceKeys { get; set; }
public bool CastDeobfuscation { get; set; }
} }
public override string Type { public override string Type {
@ -122,11 +127,10 @@ namespace de4dot.code.deobfuscators.DeepSea {
List<IBlocksDeobfuscator> getBlocksDeobfuscators() { List<IBlocksDeobfuscator> getBlocksDeobfuscators() {
var list = new List<IBlocksDeobfuscator>(); var list = new List<IBlocksDeobfuscator>();
if (CanInlineMethods) { if (arrayBlockDeobfuscator.Detected)
if (arrayBlockDeobfuscator.Detected) list.Add(arrayBlockDeobfuscator);
list.Add(arrayBlockDeobfuscator); if (!startedDeobfuscating || options.CastDeobfuscation)
list.Add(new CastDeobfuscator()); list.Add(new CastDeobfuscator());
}
return list; return list;
} }