monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Don't deobfuscate cflow unless the method sig is void name()

Browse Source
This commit is contained in:
de4dot 2012-07-30 09:13:17 +02:00
parent dc81e94d3e
commit b33c2834df
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
de4dot.code/deobfuscators/Confuser/AntiDebugger.cs
View File

@ -57,6 +57,8 @@ namespace de4dot.code.deobfuscators.Confuser {
var calledMethod = instr.Operand as MethodDefinition;
if (calledMethod == null)
continue;
if (!DotNetUtils.isMethod(calledMethod, "System.Void", "()"))
continue;
if (checkInitMethod(calledMethod)) {
initMethod = calledMethod;

2
de4dot.code/deobfuscators/Confuser/AntiDumping.cs
View File

@ -57,6 +57,8 @@ namespace de4dot.code.deobfuscators.Confuser {
var calledMethod = instr.Operand as MethodDefinition;
if (calledMethod == null)
continue;
if (!DotNetUtils.isMethod(calledMethod, "System.Void", "()"))
continue;
simpleDeobfuscator.deobfuscate(calledMethod, true);
if (checkInitMethod(calledMethod)) {