Commit Graph

97 Commits

Author SHA1 Message Date
de4dot
4c684bb67e Update copyright years 2015-10-29 22:45:26 +01:00
de4dot
436fe05756 Fix some older merges 2015-10-29 21:36:27 +01:00
angelsl
133814073c Actually use index of the not opcode
Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-28 00:01:40 +08:00
angelsl
ffeb7c9472 Detect if decrypter should skip before reading flag or vice versa
Seems like some versions of CryptoObfuscator skip the bytes before reading the
actual flag instead of the behaviour expected by de4dot currently.

Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-21 15:57:44 +08:00
de4dot
282cabed87 Some updates because of new dnlib version
- Use a GenericParamContext when resolving tokens
- IDecrypter.GetMethodBody() method signature got updated
- ICustomAttributeType now implements IMethod so we don't need to cast it
- MemberRefFinder now scans all SecurityAttributes and MarshalType for types
2014-05-10 09:00:43 +02:00
de4dot
954f0af743 Support latest CryptoObfuscator 2014-05-09 15:59:50 +02:00
de4dot
16c5153b00 Fix detection of CO SL resource type 2014-04-16 19:16:17 +02:00
de4dot
39a99d5e01 Update copyright years 2014-03-11 22:15:43 +01:00
de4dot
b299257c26 Support latest CryptoObfuscator 2013-12-04 15:37:02 +01:00
de4dot
ba29576cfb Rename get() -> Get() 2013-11-18 16:28:44 +01:00
de4dot
544aa9f145 Most deobfuscators now don't rename everything with east asian chars 2013-11-18 15:43:08 +01:00
de4dot
d410d80815 Update CO resource class detector code 2013-11-06 08:12:40 +01:00
de4dot
e70e226916 Clear deobfuscated state for each restored method 2013-09-28 19:51:25 +02:00
de4dot
24b22268e3 Deobfuscate asm resolver method 2013-09-28 19:43:05 +02:00
de4dot
f9ed45c670 Restore ldnull instructions 2013-09-28 19:07:03 +02:00
de4dot
67c9e76276 Inline methods 2013-09-28 14:55:29 +02:00
de4dot
3d05b408c9 Decrypt arrays 2013-09-25 01:37:53 +02:00
de4dot
b7255bc3b5 Add assembly string separator detection code 2013-09-24 21:44:21 +02:00
de4dot
37af3b3d11 Fix method name 2013-04-30 12:00:03 +02:00
de4dot
211d1b67f6 Use standard .NET naming convention 2013-01-19 13:03:57 +01:00
de4dot
9ac79e253e Support the latest CryptoObfuscator build 2013-01-15 01:37:21 +01:00
de4dot
88571cbf8b Update CryptoObfuscator deobfuscator 2013-01-10 02:47:53 +01:00
de4dot
05e773018e Update copyright years 2013-01-01 17:03:16 +01:00
de4dot
e15c74ae3e dnlib submodule was renamed. Update code 2012-12-20 02:06:09 +01:00
de4dot
b9d91043fc Support the latest CryptoObfuscator version 2012-12-11 12:02:40 +01:00
de4dot
87b20b00f2 Set new locals by calling SetLocals(), not by writing to the field 2012-11-30 03:24:15 +01:00
de4dot
87a83a2757 Exit if string decrypter wasn't detected 2012-11-20 04:42:19 +01:00
de4dot
4658e911a2 Reset resource data positions 2012-11-20 01:15:27 +01:00
de4dot
5ad2e18695 Update code since submodule was updated 2012-11-19 17:58:34 +01:00
de4dot
cca8eba9ed Port ILProtector deobfuscator 2012-11-18 08:13:51 +01:00
de4dot
6a7ddbaa56 Update code; submodule was updated 2012-11-16 23:50:52 +01:00
de4dot
b152362088 Update logger
- It's not static anymore
- It implements ILogger
- It can ignore errors/warnings but an option to disable it
2012-11-11 05:41:54 +01:00
de4dot
311a3c9c05 Remove now useless using statements 2012-11-10 00:02:11 +01:00
de4dot
5d25a499aa Port CryptoObfuscator deobfuscator 2012-11-08 22:24:13 +01:00
de4dot
00177034b9 Rename cecil names; add new MemberRefFinder class 2012-11-02 16:08:11 +01:00
de4dot
a34b3f7855 Support latest CO build 2012-08-22 18:33:27 +02:00
de4dot
f1a725cd19 Restore MaxStack 2012-08-21 20:17:35 +02:00
de4dot
58b1b27c69 Use correct upper limit in loop, and return false on failure... 2012-08-21 20:17:21 +02:00
de4dot
64cc8e3856 Decrypt CO encrypted methods 2012-08-21 15:40:06 +02:00
de4dot
0a5973e541 Update detection of CO types 2012-08-21 15:06:42 +02:00
de4dot
957a8ab8dd Move method to new CoUtils class 2012-08-21 15:04:40 +02:00
de4dot
cb6a3ac503 Support generic decrypter methods 2012-07-28 04:39:14 +02:00
de4dot
3abb8de345 getFieldToMethodDictionary() is now a non-virtual method 2012-07-27 07:57:13 +02:00
de4dot
1a1ccb2121 Update code since GetUserString() arg is now a token 2012-07-26 20:07:27 +02:00
de4dot
74aaf19257 Support the latest CO build 2012-07-22 20:35:33 +02:00
de4dot
762e043236 Merge branch 'co' into new_code
Conflicts:
	de4dot.code/de4dot.code.csproj
	de4dot.code/deobfuscators/CryptoObfuscator/Deobfuscator.cs
2012-07-21 12:14:04 +02:00
de4dot
2aa3c8aaea Add constants decrypter 2012-07-11 08:05:06 +02:00
de4dot
8f2f2f46ce Support latest CO build 2012-07-11 02:15:33 +02:00
de4dot
1581ec959d Merge branch 'master' into new_code 2012-07-07 19:35:54 +02:00
de4dot
b9e88972ae Support latest CO build 2012-07-02 14:26:00 +02:00