Commit Graph

403 Commits

Author SHA1 Message Date
de4dot
d24da2f24c Move method to base class 2011-12-21 19:21:06 +01:00
de4dot
f87fabd6aa Move DNR v3 and v4 code to a DNR sub dir 2011-12-21 18:55:36 +01:00
de4dot
03ff9a61cb Update strings 2011-12-21 18:30:37 +01:00
de4dot
a473f9eb02 Remove native lib linked resource 2011-12-21 18:20:59 +01:00
de4dot
4abe33f729 Remove obfuscator init calls from .ctors 2011-12-21 18:12:04 +01:00
de4dot
9136e674e5 Add anti strong name code 2011-12-21 18:04:49 +01:00
de4dot
1fd7319b19 Move patcher code to DecrypterType 2011-12-21 16:56:12 +01:00
de4dot
1e7dbfad97 Refactor 2011-12-21 07:13:19 +01:00
de4dot
2a651f5b5e Update code and fix some bugs 2011-12-21 06:41:42 +01:00
de4dot
289c11b296 Refactor 2011-12-21 06:41:06 +01:00
de4dot
795ab8bee1 Update detection code 2011-12-21 06:40:10 +01:00
de4dot
13b84383f2 Update detection code 2011-12-21 06:39:56 +01:00
de4dot
134c20c794 Add Win32Path class 2011-12-21 06:39:12 +01:00
de4dot
25869c9ff8 Add FileHeaderOffset property 2011-12-21 06:38:44 +01:00
de4dot
74b8299ef2 Remove native lib module refs 2011-12-21 00:41:09 +01:00
de4dot
c516d61ad7 Decrypt library mode files 2011-12-21 00:31:27 +01:00
de4dot
15b4cefe89 Move method to base class 2011-12-21 00:30:17 +01:00
de4dot
0d92b37536 Create DNR3 dir 2011-12-20 21:47:45 +01:00
de4dot
dd60af245a Unpack DNR 3.x application mode files 2011-12-20 20:16:57 +01:00
de4dot
746997dfe3 Add DNR 3.x application mode unpacker 2011-12-20 20:16:18 +01:00
de4dot
4a0a3fb2fc Add isCompressed() method 2011-12-20 20:13:37 +01:00
de4dot
87b4f70de9 Add decrypt() method 2011-12-20 20:13:08 +01:00
de4dot
4444b143fd Add method to get int32 array 2011-12-20 20:12:47 +01:00
de4dot
b60d53ea77 Add some more methods 2011-12-20 20:11:32 +01:00
de4dot
bc5d829714 Also check ldftn opcodes 2011-12-19 15:44:23 +01:00
de4dot
f7f77a821c Use the SetMethod property 2011-12-19 15:43:40 +01:00
de4dot
b96ab54ba6 New version: 1.3.8 2011-12-16 19:34:55 +01:00
de4dot
dd8d0d0e83 Use new method/field dictionaries 2011-12-16 19:33:44 +01:00
de4dot
f30b0ef749 Add type, method, field, prop, event dictionaries 2011-12-16 18:56:45 +01:00
de4dot
2a0e92eaff Assembly resolver now parses *.config files 2011-12-15 16:28:27 +01:00
de4dot
d35e92b53c Update field type 2011-12-15 16:17:04 +01:00
de4dot
929d943112 Update deobfuscator 2011-12-15 16:16:21 +01:00
de4dot
c73459f1be New version: 1.3.7 2011-12-11 12:38:48 +01:00
de4dot
00f7b7feda The real Main() may be called from a DNR-created Main() method 2011-12-11 11:08:32 +01:00
de4dot
78bb21832e Fix bug by resetting stream offset 2011-12-09 23:43:02 +01:00
de4dot
e7ea01f87d Move console code to new de4dot.cui assembly 2011-12-09 09:02:06 +01:00
de4dot
0fd4ddf209 Change type from ez to ef 2011-12-08 09:53:13 +01:00
de4dot
5247927eff Update regex 2011-12-08 09:52:23 +01:00
de4dot
5b7806cc1f New version: 1.3.6 2011-12-06 17:38:30 +01:00
de4dot
5ccc8e0fda Add prop/event override prefix 2011-12-06 02:45:28 +01:00
de4dot
731d302741 Pass the getter and setter methods to createProperty() 2011-12-05 23:47:48 +01:00
de4dot
6073106cfe Restore explicitly overridden props/events 2011-12-05 18:11:34 +01:00
de4dot
04940d785c Update version: 1.3.5 2011-12-04 20:02:18 +01:00
de4dot
b2801872d7 Update detection of invalid types when restoring field/method arg types 2011-12-04 20:01:02 +01:00
de4dot
427abbce79 Update detection of WinForms field names 2011-12-04 19:09:21 +01:00
de4dot
99cec56165 Update renamer code. Check for unresolved type and generic params 2011-12-04 18:22:47 +01:00
de4dot
7a6af40832 Update version: 1.3.4 2011-12-03 14:33:37 +01:00
de4dot
c9d4dc2268 Update renamer code so a compiler can compile the decompiled output
- property Byte[]_0 => Byte_0
- property ICollection.Boolean_0 => ICollection.IsSynchronized
- property pByte_0 => PByte_0
- property T_0 => Prop_0
- property indexer => Item
2011-12-03 14:28:10 +01:00
de4dot
0d18298b49 It's no longer beta! :) 2011-12-02 18:50:36 +01:00
de4dot
973e958ff1 Add better check for invalid entries 2011-12-02 18:48:01 +01:00
de4dot
0db4222c10 Update version: 1.3.3 2011-12-02 15:21:18 +01:00
de4dot
160527447c Fix bug in methods decrypter 2011-12-02 15:20:27 +01:00
de4dot
b8564335b8 Remove stack frame helper code only if the option is enabled 2011-12-02 15:20:09 +01:00
de4dot
49701686e5 Update version: 1.3.2 2011-12-02 13:19:38 +01:00
de4dot
af0ff59794 Always rename P/Invoke methods 2011-12-02 13:18:22 +01:00
de4dot
d913c61df6 Fix some todos 2011-12-02 00:43:49 +01:00
de4dot
2734a9ee95 Update the code that resolves typedefs 2011-12-01 22:32:09 +01:00
de4dot
d6ba1fa2d5 Add p prefix to types 2011-12-01 22:30:43 +01:00
de4dot
ec896da8ab Unpack .NET 1.x DNR native images 2011-12-01 14:16:23 +01:00
de4dot
82d1de5ae3 Remove *-x86 projects. Default is now x86. 2011-11-30 20:38:59 +01:00
de4dot
2f58cea471 Update the code 2011-11-30 20:27:49 +01:00
de4dot
2174011a35 Print a message after unpacking a native file 2011-11-30 20:22:52 +01:00
de4dot
3311e28a87 Don't re-read native file after unpacking it 2011-11-30 20:19:50 +01:00
de4dot
68d962fb6e Return null if inflated data isn't an MZ file 2011-11-30 19:10:56 +01:00
de4dot
8637ef5e1a Unpack DNR 4.0-4.4 + .NET 2.0+ native files 2011-11-30 19:06:25 +01:00
de4dot
20a10c92ee Warn if unpacked data could not be loaded 2011-11-30 19:05:20 +01:00
de4dot
fde811d183 Move isCode() to DeobUtils 2011-11-30 19:04:49 +01:00
de4dot
b7a44b459d Add code to unpack DNR 4.0/4.1 + .NET 2.0+ native files 2011-11-30 18:28:48 +01:00
de4dot
f567e09845 Add 'using de4dot.PE' 2011-11-30 18:27:01 +01:00
de4dot
28ec2485fc Update code to handle unpacked native images 2011-11-30 18:26:36 +01:00
de4dot
26f4afeff3 Rename class to StreamXXX if it's a stream class 2011-11-30 18:24:43 +01:00
de4dot
27e7c76636 Add code to read win32 resources 2011-11-30 18:23:47 +01:00
de4dot
98342f2a0c Move read file code to Utils 2011-11-30 18:21:01 +01:00
de4dot
4a26534ad0 Don't remove proxy delegate types and creator type if errors were detected 2011-11-28 11:45:48 +01:00
de4dot
d7c42185a8 Update detection of CliSecureRT type 2011-11-28 11:25:18 +01:00
de4dot
dab8907f8c Detect EZ version 2011-11-27 08:28:17 +01:00
de4dot
04ae6e116f New version: 1.3.1 2011-11-26 12:34:59 +01:00
de4dot
a90fd1fa2f Update detection of the empty class 2011-11-26 12:34:17 +01:00
de4dot
cec8758ed2 Check if there are any refs left to the decrypter type 2011-11-26 12:21:18 +01:00
de4dot
df6678626e Print total number of encrypted methods 2011-11-26 12:20:04 +01:00
de4dot
0ce27f8a2d Print some info about the encrypted native methods 2011-11-25 15:33:13 +01:00
de4dot
51892f62a2 Re-encrypt native methods 2011-11-25 15:24:12 +01:00
de4dot
07f0376b45 Add methods to encrypt resource data, and set new data 2011-11-25 15:21:29 +01:00
de4dot
d9a776aa3f Have DeobfuscatorBase implement IWriterListener 2011-11-25 15:19:56 +01:00
de4dot
cfe85774ab Method prefix should be an empty string 2011-11-25 15:17:12 +01:00
de4dot
900ec1bf07 Add code to dump DNR native methods to a file 2011-11-25 15:16:50 +01:00
de4dot
b259991415 Some fixes:
- Remove empty class only if methods are inlined
- Don't add .cctor methods to possibly-inlined-methods list
2011-11-24 23:58:42 +01:00
de4dot
e4e9f6787c New version: 1.3.0 2011-11-24 11:01:08 +01:00
de4dot
0516e4540d Remove calls to empty class 2011-11-24 10:44:01 +01:00
de4dot
eee2c509be Make sure decrypter type is removed 2011-11-24 10:10:39 +01:00
de4dot
17660c225e Update decrypter detection code 2011-11-24 10:08:29 +01:00
de4dot
716870b4bd Make sure InitializeComponent() detection code is called 2011-11-24 10:07:55 +01:00
de4dot
73d1316b2d Add a new random name regex 2011-11-24 07:57:31 +01:00
de4dot
3bfb2e7dc7 Update DNR detection 2011-11-24 07:49:50 +01:00
de4dot
0c4abcc039 Update detection of possibly inlined methods 2011-11-24 06:48:23 +01:00
de4dot
e68cedd44b Update tamper code 2011-11-24 05:25:34 +01:00
de4dot
a0f5a109dd Add p prefix if it's a pointer type 2011-11-24 05:25:04 +01:00
de4dot
9d61d9845d Don't add an override prefix if one of the methods is an iface method 2011-11-23 14:39:52 +01:00
de4dot
99d52b90c5 Revert older commit and print method override prefix 2011-11-23 12:13:41 +01:00
de4dot
4a65770c59 Check each part of the namespace instead of all of it at once 2011-11-23 11:50:34 +01:00