de4dot
|
83dc4226c1
|
Make sure string decrypter methods aren't detected as inlined methods
|
2012-05-03 09:51:26 +02:00 |
|
de4dot
|
870dab5b90
|
Fix renaming events/properties
|
2012-05-03 09:05:05 +02:00 |
|
de4dot
|
fb9e217dac
|
Add a cast deobfuscator
|
2012-05-03 08:01:35 +02:00 |
|
de4dot
|
c61161be1d
|
Ignore method attributes
|
2012-05-02 18:43:57 +02:00 |
|
de4dot
|
597fcb0210
|
Cflow deob methods
|
2012-05-02 13:51:07 +02:00 |
|
de4dot
|
e8049c6a05
|
Inline some obfuscated methods
|
2012-05-02 10:48:44 +02:00 |
|
de4dot
|
db14e73369
|
Make sure index is correct, and add method to read arg constants
|
2012-05-02 10:47:21 +02:00 |
|
de4dot
|
2594317b18
|
Use other sb ctor
|
2012-04-30 12:49:43 +02:00 |
|
de4dot
|
1805e352c4
|
Disable using unknown args by default
|
2012-04-30 12:18:47 +02:00 |
|
de4dot
|
f307520e62
|
Decrypt DS 4.1 strings
|
2012-04-30 08:33:05 +02:00 |
|
de4dot
|
a1daee56f8
|
Support more types of args
|
2012-04-30 08:31:09 +02:00 |
|
de4dot
|
e29a8ea692
|
Update cflow deobfuscator
|
2012-04-30 01:29:05 +02:00 |
|
de4dot
|
6b18d70e77
|
Move common code to another class
|
2012-04-30 01:26:34 +02:00 |
|
de4dot
|
83b14da5c8
|
Refactor: create common cflow deob iface
|
2012-04-29 23:51:04 +02:00 |
|
de4dot
|
920f079855
|
Set initlocals and add an option to disable it
|
2012-04-29 06:16:53 +02:00 |
|
de4dot
|
eb17298625
|
Move the field
|
2012-04-29 04:35:58 +02:00 |
|
de4dot
|
48b9c461f5
|
Restore calls to CodeDomProvider and ICodeCompiler
|
2012-04-29 04:03:10 +02:00 |
|
de4dot
|
9333e2415c
|
Rename class
|
2012-04-29 00:56:17 +02:00 |
|
de4dot
|
e548436ede
|
Restore calls to Icon/Bitmap .ctor
|
2012-04-29 00:51:09 +02:00 |
|
de4dot
|
b92b23df4a
|
Rename class and make it more general
|
2012-04-29 00:11:28 +02:00 |
|
de4dot
|
f9c78f8a8b
|
Decrypt CS 1.x encrypted methods
|
2012-04-28 08:50:37 +02:00 |
|
de4dot
|
03e2e621ea
|
Update detection of resource resolver type
|
2012-04-26 20:50:06 +02:00 |
|
de4dot
|
9754b01ba9
|
Merge branch 'master' into cs
|
2012-04-26 19:33:28 +02:00 |
|
de4dot
|
7a0804e035
|
Remove module references to the CS RT files
|
2012-04-26 17:14:54 +02:00 |
|
de4dot
|
7e5e7ddcd2
|
Find old string decrypter method
|
2012-04-26 16:53:52 +02:00 |
|
de4dot
|
67c866491d
|
Show the correct obfuscator name
|
2012-04-26 16:33:55 +02:00 |
|
de4dot
|
6f830b8329
|
Remove all obfuscator attributes
|
2012-04-26 16:23:07 +02:00 |
|
de4dot
|
aa6e7c0fc2
|
Add addAttributesToBeRemoved()
|
2012-04-26 16:08:39 +02:00 |
|
de4dot
|
960f934c67
|
Update detection of CS type
|
2012-04-26 14:46:22 +02:00 |
|
de4dot
|
e10dce2d95
|
Check for 32-bit or 64-bit method
|
2012-04-26 02:31:31 +02:00 |
|
de4dot
|
5b97faf2dd
|
Detect CS type when strings are encrypted, but methods aren't
|
2012-04-26 01:56:59 +02:00 |
|
de4dot
|
ab60692c2f
|
Return the correct return value
|
2012-04-26 01:48:59 +02:00 |
|
de4dot
|
d84d2e6a6c
|
Update CS detector and support an old string decrypter
|
2012-04-26 01:42:10 +02:00 |
|
de4dot
|
bff017a317
|
Throw InvalidMethodBody if IOException
|
2012-04-25 18:06:27 +02:00 |
|
de4dot
|
903db59827
|
Restore CS 3.0 "encrypted" methods
|
2012-04-25 13:49:22 +02:00 |
|
de4dot
|
4e89d707dc
|
Move code to DeobUtils
|
2012-04-25 13:21:53 +02:00 |
|
de4dot
|
8a45abfd3d
|
Stop earlier
|
2012-04-25 11:09:30 +02:00 |
|
de4dot
|
adea5b3ef6
|
Support latest MC build
|
2012-04-24 23:02:36 +02:00 |
|
de4dot
|
3a9422f798
|
Remove useless displs
|
2012-04-24 22:30:17 +02:00 |
|
de4dot
|
2b4fc0a836
|
Merge branch 'master' into cs
|
2012-04-24 11:39:31 +02:00 |
|
de4dot
|
eebb831c4b
|
Update CSVM opcode handler detection code
|
2012-04-24 11:33:17 +02:00 |
|
de4dot
|
88d7607d10
|
Fix resolver
|
2012-04-24 11:25:39 +02:00 |
|
de4dot
|
586be53fef
|
Fix method names
|
2012-04-23 19:37:05 +02:00 |
|
de4dot
|
7a399e7913
|
Rename class and update comments
|
2012-04-23 15:02:15 +02:00 |
|
de4dot
|
ea7a533027
|
Make fields read only
|
2012-04-23 15:00:42 +02:00 |
|
de4dot
|
b28dd6277a
|
Fix method names
|
2012-04-23 14:47:05 +02:00 |
|
de4dot
|
0a0b491072
|
Copy foundSig field
|
2012-04-23 14:40:56 +02:00 |
|
de4dot
|
dba8d8ebef
|
Use a using statement to make sure the file is closed when we return
|
2012-04-23 14:25:12 +02:00 |
|
de4dot
|
4f34e5c374
|
Restore .NET data directory so it can be deobfuscated
|
2012-04-23 02:04:34 +02:00 |
|
de4dot
|
790dc9f445
|
codeOffs should not be file offset
|
2012-04-22 21:26:57 +02:00 |
|