monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix merge. Code used a much older dnlib version

Browse Source
This commit is contained in:
de4dot 2015-10-29 21:36:57 +01:00
parent 7cde561e6b
commit eefa799e0d
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
de4dot.code/deobfuscators/Confuser/JitMethodsDecrypter.cs
View File

@ -476,7 +476,7 @@ namespace de4dot.code.deobfuscators.Confuser {
DumpedMethods Decrypt_v17_r73404(MyPEImage peImage, byte[] fileData) {
var dumpedMethods = new DumpedMethods();
var methodDef = peImage.DotNetFile.MetaData.TablesStream.MethodTable;
var methodDef = peImage.MetaData.TablesStream.MethodTable;
for (uint rid = 1; rid <= methodDef.Rows; rid++) {
var dm = new DumpedMethod();
peImage.ReadMethodTableRowTo(dm, rid);
@ -604,7 +604,7 @@ namespace de4dot.code.deobfuscators.Confuser {
DumpedMethods Decrypt(MyPEImage peImage, byte[] fileData, DecryptMethodData decrypter) {
var dumpedMethods = new DumpedMethods();
var methodDef = peImage.DotNetFile.MetaData.TablesStream.MethodTable;
var methodDef = peImage.MetaData.TablesStream.MethodTable;
for (uint rid = 1; rid <= methodDef.Rows; rid++) {
var dm = new DumpedMethod();
peImage.ReadMethodTableRowTo(dm, rid);

2
de4dot.code/deobfuscators/Confuser/MethodsDecrypterBase.cs
View File

@ -364,7 +364,7 @@ namespace de4dot.code.deobfuscators.Confuser {
var memStream = new MemoryStream();
var writer = new BinaryWriter(memStream);
var reader = peImage.Reader;
foreach (var mdStream in peImage.DotNetFile.MetaData.AllStreams) {
foreach (var mdStream in peImage.MetaData.AllStreams) {
reader.Position = (long)mdStream.StartOffset;
writer.Write(reader.ReadBytes((int)(mdStream.EndOffset - mdStream.StartOffset)));
}