de4dot
|
00177034b9
|
Rename cecil names; add new MemberRefFinder class
|
2012-11-02 16:08:11 +01:00 |
|
de4dot
|
1341cc7199
|
Port more code
|
2012-11-01 16:42:02 +01:00 |
|
de4dot
|
cb6a3ac503
|
Support generic decrypter methods
|
2012-07-28 04:39:14 +02:00 |
|
de4dot
|
4374a08020
|
getDecryptedModule() can now be called multiple times
|
2012-07-24 17:02:27 +02:00 |
|
de4dot
|
0a5764a093
|
Change method to take a ref to a type
|
2012-07-07 00:58:18 +02:00 |
|
de4dot
|
a2baf1fdea
|
Merge branch 'master' into new_code
|
2012-06-27 15:15:03 +02:00 |
|
de4dot
|
4dce00b35a
|
Merge branch 'rummage' into new_code
Conflicts:
de4dot.cui/Program.cs
|
2012-06-27 15:14:40 +02:00 |
|
de4dot
|
cd0a193bdf
|
Support latest AN build
|
2012-06-27 10:27:16 +02:00 |
|
de4dot
|
ec8139f640
|
Refactor code and support latest AN build
|
2012-06-02 07:26:21 +02:00 |
|
de4dot
|
7b3dcf8e05
|
Refactor proxy call fixer classes
|
2012-05-29 11:13:39 +02:00 |
|
de4dot
|
c48b2d92c2
|
Support AN 6.0.0.5 (new build, same version)
|
2012-05-19 08:59:13 +02:00 |
|
de4dot
|
c3cdf95fcf
|
Support AN 6.0.0.5
|
2012-05-15 19:05:47 +02:00 |
|
de4dot
|
83b14da5c8
|
Refactor: create common cflow deob iface
|
2012-04-29 23:51:04 +02:00 |
|
de4dot
|
920f079855
|
Set initlocals and add an option to disable it
|
2012-04-29 06:16:53 +02:00 |
|
de4dot
|
f9c78f8a8b
|
Decrypt CS 1.x encrypted methods
|
2012-04-28 08:50:37 +02:00 |
|
de4dot
|
03e2e621ea
|
Update detection of resource resolver type
|
2012-04-26 20:50:06 +02:00 |
|
de4dot
|
7a0804e035
|
Remove module references to the CS RT files
|
2012-04-26 17:14:54 +02:00 |
|
de4dot
|
7e5e7ddcd2
|
Find old string decrypter method
|
2012-04-26 16:53:52 +02:00 |
|
de4dot
|
67c866491d
|
Show the correct obfuscator name
|
2012-04-26 16:33:55 +02:00 |
|
de4dot
|
6f830b8329
|
Remove all obfuscator attributes
|
2012-04-26 16:23:07 +02:00 |
|
de4dot
|
960f934c67
|
Update detection of CS type
|
2012-04-26 14:46:22 +02:00 |
|
de4dot
|
e10dce2d95
|
Check for 32-bit or 64-bit method
|
2012-04-26 02:31:31 +02:00 |
|
de4dot
|
5b97faf2dd
|
Detect CS type when strings are encrypted, but methods aren't
|
2012-04-26 01:56:59 +02:00 |
|
de4dot
|
ab60692c2f
|
Return the correct return value
|
2012-04-26 01:48:59 +02:00 |
|
de4dot
|
d84d2e6a6c
|
Update CS detector and support an old string decrypter
|
2012-04-26 01:42:10 +02:00 |
|
de4dot
|
903db59827
|
Restore CS 3.0 "encrypted" methods
|
2012-04-25 13:49:22 +02:00 |
|
de4dot
|
2b4fc0a836
|
Merge branch 'master' into cs
|
2012-04-24 11:39:31 +02:00 |
|
de4dot
|
eebb831c4b
|
Update CSVM opcode handler detection code
|
2012-04-24 11:33:17 +02:00 |
|
de4dot
|
586be53fef
|
Fix method names
|
2012-04-23 19:37:05 +02:00 |
|
de4dot
|
7a399e7913
|
Rename class and update comments
|
2012-04-23 15:02:15 +02:00 |
|
de4dot
|
ea7a533027
|
Make fields read only
|
2012-04-23 15:00:42 +02:00 |
|
de4dot
|
b28dd6277a
|
Fix method names
|
2012-04-23 14:47:05 +02:00 |
|
de4dot
|
0a0b491072
|
Copy foundSig field
|
2012-04-23 14:40:56 +02:00 |
|
de4dot
|
dba8d8ebef
|
Use a using statement to make sure the file is closed when we return
|
2012-04-23 14:25:12 +02:00 |
|
de4dot
|
4f34e5c374
|
Restore .NET data directory so it can be deobfuscated
|
2012-04-23 02:04:34 +02:00 |
|
de4dot
|
790dc9f445
|
codeOffs should not be file offset
|
2012-04-22 21:26:57 +02:00 |
|
de4dot
|
c9fa7caf91
|
Decrypt CS 5.0 encrypted methods
|
2012-04-22 21:19:57 +02:00 |
|
de4dot
|
d3f1a2fd8e
|
Decrypt CS 4.5 encrypted methods
|
2012-04-22 20:35:01 +02:00 |
|
de4dot
|
fbba6a2aa8
|
Decrypt methods (CS RT is embedded inside the assembly)
|
2012-04-22 16:18:41 +02:00 |
|
de4dot
|
c9f63a5866
|
Restore CS 4.0 "encrypted" methods
|
2012-04-22 15:36:26 +02:00 |
|
de4dot
|
a459bc107c
|
Make sure <Module>::.cctor() only calls <CliSecureRT>::Initialize()
|
2012-04-13 05:03:51 +02:00 |
|
de4dot
|
3a8e1499f2
|
Use dynamic decryption if static decryption fails
|
2012-04-11 03:09:59 +02:00 |
|
de4dot
|
c756d543c1
|
Rename PE namespace
|
2012-04-10 16:32:15 +02:00 |
|
de4dot
|
634e9ec023
|
Reverse return value
|
2012-04-07 06:47:19 +02:00 |
|
de4dot
|
52d6f73f5e
|
Add a newline
|
2012-04-06 16:36:07 +02:00 |
|
de4dot
|
33e2177059
|
Restore constrained. prefix
|
2012-04-06 16:08:35 +02:00 |
|
de4dot
|
5511ab833b
|
Update ldelema type, and add unbox.any and ldobj
|
2012-04-06 15:38:44 +02:00 |
|
de4dot
|
2949862614
|
Print warning if we failed to restore an instr op
|
2012-04-06 12:33:39 +02:00 |
|
de4dot
|
c39e421010
|
Fix locals
|
2012-04-06 12:25:15 +02:00 |
|
de4dot
|
86190ede1f
|
Print devirtualized methods
|
2012-04-06 11:05:06 +02:00 |
|