Commit Graph

46 Commits

Author SHA1 Message Date
de4dot
6bf54bbae2 Use version from ConfusedBy attribute on module/asm to narrow down the detected version 2012-08-16 01:12:10 +02:00
de4dot
b5aebd4731 Set ILOnly flag in .NET header 2012-08-12 02:52:48 +02:00
de4dot
4b9ee54409 Return string decrypter method tokens 2012-08-12 02:47:03 +02:00
de4dot
0d04bef305 Log the returned revisions 2012-08-12 00:38:26 +02:00
de4dot
e9125616b9 Remember detected compressor version 2012-08-11 01:15:25 +02:00
de4dot
95b6041788 Use the correct file extension when saving the main module 2012-08-09 14:14:15 +02:00
de4dot
291040abfe Detect and print Confuser version 2012-08-09 12:05:16 +02:00
de4dot
72c22d7566 Add missing init call and rename methods 2012-08-09 01:20:58 +02:00
de4dot
876c13c08a Rename proxy method class 2012-08-08 17:40:24 +02:00
de4dot
a2798908b0 Merge other proxy method class with the V10 one 2012-08-08 17:38:38 +02:00
de4dot
efb828ac90 Rename class 2012-08-08 01:33:26 +02:00
de4dot
6baa3f0e2f Support Confuser 1.7 r74708 constants encrypter 2012-08-07 14:40:51 +02:00
de4dot
9db99626f2 Refactor 2012-08-05 20:25:43 +02:00
de4dot
923fb1f9ca Call the correct ctor 2012-08-05 04:42:59 +02:00
de4dot
a3dbf5273d Support Confuser 1.7 r73822 constants encrypter 2012-08-05 02:07:43 +02:00
de4dot
5ded502104 Remove invalid asm ref added by Confuser 1.7 r73764 2012-08-04 11:21:52 +02:00
de4dot
13d0cff55b Support Confuser 1.7 r73764 constants encrypter 2012-08-04 11:01:24 +02:00
de4dot
bc1a3e5ece Support Confuser 1.7 r73740 proxy methods 2012-08-04 09:26:13 +02:00
de4dot
00d27a89f6 Support Confuser 1.7 r73477 compressor 2012-08-03 22:55:11 +02:00
de4dot
2c33d80ccc Support netmodules 2012-08-03 20:24:14 +02:00
de4dot
b5ef7a7b12 Rename proxy class to ...V10 2012-08-02 17:23:16 +02:00
de4dot
e1758ddbb0 Support Confuser 1.6 r71742 methods decrypter 2012-08-02 11:12:20 +02:00
de4dot
6e262eb621 Add support for Confuser 1.5 r60785 constants encrypter (normal mode) 2012-08-01 22:38:57 +02:00
de4dot
b60eca8ae2 Add an option to only dump the main embedded asm 2012-08-01 12:37:26 +02:00
de4dot
002da4602a Support Confuser 1.4 r58802 compressor and dump embedded asms 2012-08-01 11:41:31 +02:00
de4dot
6953760ffc Change Confuser type from cn to cr
'cr' is what the author of Confuser uses.
2012-08-01 09:18:06 +02:00
de4dot
3e49c0bfa5 Support Confuser 1.4 r58564 compressor 2012-07-31 19:56:10 +02:00
de4dot
d99133658c Support Confuser 1.4 r58564 proxy methods 2012-07-31 19:12:35 +02:00
de4dot
433a0d2b0a Check for encrypted methods in moduleReloaded() 2012-07-31 14:25:40 +02:00
de4dot
995e836fd8 Remove Confuser 1.3 r57588 anti debug method 2012-07-31 10:52:25 +02:00
de4dot
bb9e4cbf26 Remove resources with an invalid RVA 2012-07-31 10:41:20 +02:00
de4dot
4b2da13972 Decrypt encrypted strings resource before initializing string decrypter 2012-07-31 10:09:45 +02:00
de4dot
2e99bac40c Unpack compressed Confuser assemblies 2012-07-30 14:11:04 +02:00
de4dot
7321e51a78 Decrypt Confuser 1.0 encrypted strings 2012-07-30 10:28:11 +02:00
de4dot
85ce802131 Add Confuser 1.0 proxy call fixer 2012-07-30 09:19:17 +02:00
de4dot
fb47689f58 Decrypt Confuser encrypted methods (memory) 2012-07-29 20:04:35 +02:00
de4dot
5b026a0d05 Add null check 2012-07-29 14:26:57 +02:00
de4dot
f20b2e648b Fix detection when numeric const encryption is enabled 2012-07-29 13:24:50 +02:00
de4dot
db5c6fcf26 Decrypt Confuser encrypted constants 2012-07-28 04:45:27 +02:00
de4dot
6a15bfeee7 Decrypt Confuser encrypted resources 2012-07-27 12:49:00 +02:00
de4dot
16e6a986c7 Remove ConfusedByAttribute type 2012-07-27 08:50:58 +02:00
de4dot
872b4f61a2 Remove anti dumper type 2012-07-27 08:47:37 +02:00
de4dot
4840a117cf Remove anti debugger type 2012-07-27 08:40:21 +02:00
de4dot
38d94819ee Remove method decrypter type and init method call 2012-07-27 08:23:55 +02:00
de4dot
74970e80ff Add Confuser proxy fixer 2012-07-27 08:11:23 +02:00
de4dot
70bd973cdd Decrypt Confuser 1.9 encrypted JIT methods 2012-07-26 20:12:12 +02:00