monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add workaround for DNR patch bug

Browse Source
This commit is contained in:
de4dot 2011-12-22 17:40:21 +01:00
parent a38781c1d0
commit c86daacda8
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
de4dot.code/deobfuscators/dotNET_Reactor/v3/DecrypterType.cs
View File

@ -166,6 +166,7 @@ namespace de4dot.code.deobfuscators.dotNET_Reactor.v3 {
uint numPatches = peImage.offsetReadUInt32(peImage.ImageLength - 4);
uint offset = checked(peImage.ImageLength - 4 - numPatches * 8);
bool startedPatchingBadData = false;
for (uint i = 0; i < numPatches; i++, offset += 8) {
uint rva = getValue(peImage.offsetReadUInt32(offset));
var value = peImage.offsetReadUInt32(offset + 4);
@ -179,7 +180,12 @@ namespace de4dot.code.deobfuscators.dotNET_Reactor.v3 {
else
value = getValue(value);
peImage.dotNetSafeWrite(rva, BitConverter.GetBytes(value));
// Seems there's a bug in their code where they sometimes overwrite valid data
// with invalid data.
if (startedPatchingBadData && value == 0x3115)
continue;
startedPatchingBadData |= peImage.dotNetSafeWrite(rva, BitConverter.GetBytes(value));
}
return true;