de4dot
|
5b43e33a35
|
Remove old PeImage code and use the new one
|
2012-11-21 11:14:20 +01:00 |
|
de4dot
|
f6b5a3117f
|
Port CodeVeil deobfuscator
|
2012-11-08 09:48:05 +01:00 |
|
de4dot
|
4be7e4fe46
|
Initialize DumpedMethod.mdRVA
|
2012-11-07 00:26:36 +01:00 |
|
de4dot
|
00177034b9
|
Rename cecil names; add new MemberRefFinder class
|
2012-11-02 16:08:11 +01:00 |
|
de4dot
|
1a79ffde92
|
Move code to a new class
|
2012-04-22 13:43:43 +02:00 |
|
de4dot
|
c756d543c1
|
Rename PE namespace
|
2012-04-10 16:32:15 +02:00 |
|
de4dot
|
48758be8f0
|
Use a new class instead of the dict
|
2012-02-25 06:14:19 +01:00 |
|
de4dot
|
42f66c3948
|
Fix detection; 3.2 doesn't have those extra fields
|
2012-02-12 12:03:55 +01:00 |
|
de4dot
|
780da4a0ad
|
Update detection of encrypted methods data
|
2012-02-08 15:52:39 +01:00 |
|
de4dot
|
fa6b0d4054
|
Move detection of CV main type to its own class
|
2012-02-08 15:40:11 +01:00 |
|
de4dot
|
09e840923d
|
Search for sig starting from _stub RVA
|
2012-02-08 09:29:49 +01:00 |
|
de4dot
|
a8d4b38c79
|
Mover version info to a new ObfuscatorVersion enum
|
2012-02-08 08:55:45 +01:00 |
|
de4dot
|
1076218a81
|
Detect CV version
|
2012-02-07 15:05:27 +01:00 |
|
de4dot
|
6ab0748bdd
|
Decrypt V5 encrypted methods
|
2012-02-07 14:55:20 +01:00 |
|
de4dot
|
3276f433c9
|
Add code to detect V5 methods decrypter
|
2012-02-07 05:08:02 +01:00 |
|
de4dot
|
0aeee176cc
|
Merge v3-v4 and v5 code
|
2012-02-07 04:45:59 +01:00 |
|
de4dot
|
0d6542e383
|
Move v3-v4 code to a sub dir
|
2012-02-06 15:49:27 +01:00 |
|
de4dot
|
b3750f9d4c
|
Initialize its token field
|
2012-02-05 23:04:24 +01:00 |
|
de4dot
|
542c6bb213
|
Support 3.2 methods decrypter
|
2012-02-05 22:49:10 +01:00 |
|
de4dot
|
d5c3a6964b
|
Support 4.0 methods decrypter
|
2012-02-05 21:27:36 +01:00 |
|
de4dot
|
029c049bf6
|
Move readVariableLengthInteger() to DeobUtils
|
2012-02-05 18:46:14 +01:00 |
|
de4dot
|
23c72927b5
|
Add CV and methods decrypter
|
2012-02-05 16:17:47 +01:00 |
|