xode0
6bfb3bc4a7
Add resource name decryption
...
.
Update Crypto StringDecrypter and move DecryptResourceName from ConstantsDecrypter to CoUtils.
Follow de4dot coding style.
Tabify the last commits.
2016-02-11 20:28:00 +01:00
de4dot
4c684bb67e
Update copyright years
2015-10-29 22:45:26 +01:00
de4dot
436fe05756
Fix some older merges
2015-10-29 21:36:27 +01:00
angelsl
133814073c
Actually use index of the not opcode
...
Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-28 00:01:40 +08:00
angelsl
ffeb7c9472
Detect if decrypter should skip before reading flag or vice versa
...
Seems like some versions of CryptoObfuscator skip the bytes before reading the
actual flag instead of the behaviour expected by de4dot currently.
Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-21 15:57:44 +08:00
de4dot
282cabed87
Some updates because of new dnlib version
...
- Use a GenericParamContext when resolving tokens
- IDecrypter.GetMethodBody() method signature got updated
- ICustomAttributeType now implements IMethod so we don't need to cast it
- MemberRefFinder now scans all SecurityAttributes and MarshalType for types
2014-05-10 09:00:43 +02:00
de4dot
954f0af743
Support latest CryptoObfuscator
2014-05-09 15:59:50 +02:00
de4dot
16c5153b00
Fix detection of CO SL resource type
2014-04-16 19:16:17 +02:00
de4dot
39a99d5e01
Update copyright years
2014-03-11 22:15:43 +01:00
de4dot
b299257c26
Support latest CryptoObfuscator
2013-12-04 15:37:02 +01:00
de4dot
ba29576cfb
Rename get() -> Get()
2013-11-18 16:28:44 +01:00
de4dot
544aa9f145
Most deobfuscators now don't rename everything with east asian chars
2013-11-18 15:43:08 +01:00
de4dot
d410d80815
Update CO resource class detector code
2013-11-06 08:12:40 +01:00
de4dot
e70e226916
Clear deobfuscated state for each restored method
2013-09-28 19:51:25 +02:00
de4dot
24b22268e3
Deobfuscate asm resolver method
2013-09-28 19:43:05 +02:00
de4dot
f9ed45c670
Restore ldnull instructions
2013-09-28 19:07:03 +02:00
de4dot
67c9e76276
Inline methods
2013-09-28 14:55:29 +02:00
de4dot
3d05b408c9
Decrypt arrays
2013-09-25 01:37:53 +02:00
de4dot
b7255bc3b5
Add assembly string separator detection code
2013-09-24 21:44:21 +02:00
de4dot
37af3b3d11
Fix method name
2013-04-30 12:00:03 +02:00
de4dot
211d1b67f6
Use standard .NET naming convention
2013-01-19 13:03:57 +01:00
de4dot
9ac79e253e
Support the latest CryptoObfuscator build
2013-01-15 01:37:21 +01:00
de4dot
88571cbf8b
Update CryptoObfuscator deobfuscator
2013-01-10 02:47:53 +01:00
de4dot
05e773018e
Update copyright years
2013-01-01 17:03:16 +01:00
de4dot
e15c74ae3e
dnlib submodule was renamed. Update code
2012-12-20 02:06:09 +01:00
de4dot
b9d91043fc
Support the latest CryptoObfuscator version
2012-12-11 12:02:40 +01:00
de4dot
87b20b00f2
Set new locals by calling SetLocals(), not by writing to the field
2012-11-30 03:24:15 +01:00
de4dot
87a83a2757
Exit if string decrypter wasn't detected
2012-11-20 04:42:19 +01:00
de4dot
4658e911a2
Reset resource data positions
2012-11-20 01:15:27 +01:00
de4dot
5ad2e18695
Update code since submodule was updated
2012-11-19 17:58:34 +01:00
de4dot
cca8eba9ed
Port ILProtector deobfuscator
2012-11-18 08:13:51 +01:00
de4dot
6a7ddbaa56
Update code; submodule was updated
2012-11-16 23:50:52 +01:00
de4dot
b152362088
Update logger
...
- It's not static anymore
- It implements ILogger
- It can ignore errors/warnings but an option to disable it
2012-11-11 05:41:54 +01:00
de4dot
311a3c9c05
Remove now useless using statements
2012-11-10 00:02:11 +01:00
de4dot
5d25a499aa
Port CryptoObfuscator deobfuscator
2012-11-08 22:24:13 +01:00
de4dot
00177034b9
Rename cecil names; add new MemberRefFinder class
2012-11-02 16:08:11 +01:00
de4dot
a34b3f7855
Support latest CO build
2012-08-22 18:33:27 +02:00
de4dot
f1a725cd19
Restore MaxStack
2012-08-21 20:17:35 +02:00
de4dot
58b1b27c69
Use correct upper limit in loop, and return false on failure...
2012-08-21 20:17:21 +02:00
de4dot
64cc8e3856
Decrypt CO encrypted methods
2012-08-21 15:40:06 +02:00
de4dot
0a5973e541
Update detection of CO types
2012-08-21 15:06:42 +02:00
de4dot
957a8ab8dd
Move method to new CoUtils class
2012-08-21 15:04:40 +02:00
de4dot
cb6a3ac503
Support generic decrypter methods
2012-07-28 04:39:14 +02:00
de4dot
3abb8de345
getFieldToMethodDictionary() is now a non-virtual method
2012-07-27 07:57:13 +02:00
de4dot
1a1ccb2121
Update code since GetUserString() arg is now a token
2012-07-26 20:07:27 +02:00
de4dot
74aaf19257
Support the latest CO build
2012-07-22 20:35:33 +02:00
de4dot
762e043236
Merge branch 'co' into new_code
...
Conflicts:
de4dot.code/de4dot.code.csproj
de4dot.code/deobfuscators/CryptoObfuscator/Deobfuscator.cs
2012-07-21 12:14:04 +02:00
de4dot
2aa3c8aaea
Add constants decrypter
2012-07-11 08:05:06 +02:00
de4dot
8f2f2f46ce
Support latest CO build
2012-07-11 02:15:33 +02:00
de4dot
1581ec959d
Merge branch 'master' into new_code
2012-07-07 19:35:54 +02:00