de4dot
|
b60d53ea77
|
Add some more methods
|
2011-12-20 20:11:32 +01:00 |
|
de4dot
|
bc5d829714
|
Also check ldftn opcodes
|
2011-12-19 15:44:23 +01:00 |
|
de4dot
|
f7f77a821c
|
Use the SetMethod property
|
2011-12-19 15:43:40 +01:00 |
|
de4dot
|
b96ab54ba6
|
New version: 1.3.8
|
2011-12-16 19:34:55 +01:00 |
|
de4dot
|
dd8d0d0e83
|
Use new method/field dictionaries
|
2011-12-16 19:33:44 +01:00 |
|
de4dot
|
f30b0ef749
|
Add type, method, field, prop, event dictionaries
|
2011-12-16 18:56:45 +01:00 |
|
de4dot
|
2a0e92eaff
|
Assembly resolver now parses *.config files
|
2011-12-15 16:28:27 +01:00 |
|
de4dot
|
d35e92b53c
|
Update field type
|
2011-12-15 16:17:04 +01:00 |
|
de4dot
|
929d943112
|
Update deobfuscator
|
2011-12-15 16:16:21 +01:00 |
|
de4dot
|
c73459f1be
|
New version: 1.3.7
|
2011-12-11 12:38:48 +01:00 |
|
de4dot
|
00f7b7feda
|
The real Main() may be called from a DNR-created Main() method
|
2011-12-11 11:08:32 +01:00 |
|
de4dot
|
78bb21832e
|
Fix bug by resetting stream offset
|
2011-12-09 23:43:02 +01:00 |
|
de4dot
|
e7ea01f87d
|
Move console code to new de4dot.cui assembly
|
2011-12-09 09:02:06 +01:00 |
|
de4dot
|
0fd4ddf209
|
Change type from ez to ef
|
2011-12-08 09:53:13 +01:00 |
|
de4dot
|
5247927eff
|
Update regex
|
2011-12-08 09:52:23 +01:00 |
|
de4dot
|
5b7806cc1f
|
New version: 1.3.6
|
2011-12-06 17:38:30 +01:00 |
|
de4dot
|
5ccc8e0fda
|
Add prop/event override prefix
|
2011-12-06 02:45:28 +01:00 |
|
de4dot
|
731d302741
|
Pass the getter and setter methods to createProperty()
|
2011-12-05 23:47:48 +01:00 |
|
de4dot
|
6073106cfe
|
Restore explicitly overridden props/events
|
2011-12-05 18:11:34 +01:00 |
|
de4dot
|
04940d785c
|
Update version: 1.3.5
|
2011-12-04 20:02:18 +01:00 |
|
de4dot
|
b2801872d7
|
Update detection of invalid types when restoring field/method arg types
|
2011-12-04 20:01:02 +01:00 |
|
de4dot
|
427abbce79
|
Update detection of WinForms field names
|
2011-12-04 19:09:21 +01:00 |
|
de4dot
|
99cec56165
|
Update renamer code. Check for unresolved type and generic params
|
2011-12-04 18:22:47 +01:00 |
|
de4dot
|
7a6af40832
|
Update version: 1.3.4
|
2011-12-03 14:33:37 +01:00 |
|
de4dot
|
c9d4dc2268
|
Update renamer code so a compiler can compile the decompiled output
- property Byte[]_0 => Byte_0
- property ICollection.Boolean_0 => ICollection.IsSynchronized
- property pByte_0 => PByte_0
- property T_0 => Prop_0
- property indexer => Item
|
2011-12-03 14:28:10 +01:00 |
|
de4dot
|
0d18298b49
|
It's no longer beta! :)
|
2011-12-02 18:50:36 +01:00 |
|
de4dot
|
973e958ff1
|
Add better check for invalid entries
|
2011-12-02 18:48:01 +01:00 |
|
de4dot
|
0db4222c10
|
Update version: 1.3.3
|
2011-12-02 15:21:18 +01:00 |
|
de4dot
|
160527447c
|
Fix bug in methods decrypter
|
2011-12-02 15:20:27 +01:00 |
|
de4dot
|
b8564335b8
|
Remove stack frame helper code only if the option is enabled
|
2011-12-02 15:20:09 +01:00 |
|
de4dot
|
49701686e5
|
Update version: 1.3.2
|
2011-12-02 13:19:38 +01:00 |
|
de4dot
|
af0ff59794
|
Always rename P/Invoke methods
|
2011-12-02 13:18:22 +01:00 |
|
de4dot
|
d913c61df6
|
Fix some todos
|
2011-12-02 00:43:49 +01:00 |
|
de4dot
|
2734a9ee95
|
Update the code that resolves typedefs
|
2011-12-01 22:32:09 +01:00 |
|
de4dot
|
d6ba1fa2d5
|
Add p prefix to types
|
2011-12-01 22:30:43 +01:00 |
|
de4dot
|
ec896da8ab
|
Unpack .NET 1.x DNR native images
|
2011-12-01 14:16:23 +01:00 |
|
de4dot
|
82d1de5ae3
|
Remove *-x86 projects. Default is now x86.
|
2011-11-30 20:38:59 +01:00 |
|
de4dot
|
2f58cea471
|
Update the code
|
2011-11-30 20:27:49 +01:00 |
|
de4dot
|
2174011a35
|
Print a message after unpacking a native file
|
2011-11-30 20:22:52 +01:00 |
|
de4dot
|
3311e28a87
|
Don't re-read native file after unpacking it
|
2011-11-30 20:19:50 +01:00 |
|
de4dot
|
68d962fb6e
|
Return null if inflated data isn't an MZ file
|
2011-11-30 19:10:56 +01:00 |
|
de4dot
|
8637ef5e1a
|
Unpack DNR 4.0-4.4 + .NET 2.0+ native files
|
2011-11-30 19:06:25 +01:00 |
|
de4dot
|
20a10c92ee
|
Warn if unpacked data could not be loaded
|
2011-11-30 19:05:20 +01:00 |
|
de4dot
|
fde811d183
|
Move isCode() to DeobUtils
|
2011-11-30 19:04:49 +01:00 |
|
de4dot
|
b7a44b459d
|
Add code to unpack DNR 4.0/4.1 + .NET 2.0+ native files
|
2011-11-30 18:28:48 +01:00 |
|
de4dot
|
f567e09845
|
Add 'using de4dot.PE'
|
2011-11-30 18:27:01 +01:00 |
|
de4dot
|
28ec2485fc
|
Update code to handle unpacked native images
|
2011-11-30 18:26:36 +01:00 |
|
de4dot
|
26f4afeff3
|
Rename class to StreamXXX if it's a stream class
|
2011-11-30 18:24:43 +01:00 |
|
de4dot
|
27e7c76636
|
Add code to read win32 resources
|
2011-11-30 18:23:47 +01:00 |
|
de4dot
|
98342f2a0c
|
Move read file code to Utils
|
2011-11-30 18:21:01 +01:00 |
|
de4dot
|
4a26534ad0
|
Don't remove proxy delegate types and creator type if errors were detected
|
2011-11-28 11:45:48 +01:00 |
|
de4dot
|
d7c42185a8
|
Update detection of CliSecureRT type
|
2011-11-28 11:25:18 +01:00 |
|
de4dot
|
dab8907f8c
|
Detect EZ version
|
2011-11-27 08:28:17 +01:00 |
|
de4dot
|
04ae6e116f
|
New version: 1.3.1
|
2011-11-26 12:34:59 +01:00 |
|
de4dot
|
a90fd1fa2f
|
Update detection of the empty class
|
2011-11-26 12:34:17 +01:00 |
|
de4dot
|
cec8758ed2
|
Check if there are any refs left to the decrypter type
|
2011-11-26 12:21:18 +01:00 |
|
de4dot
|
df6678626e
|
Print total number of encrypted methods
|
2011-11-26 12:20:04 +01:00 |
|
de4dot
|
0ce27f8a2d
|
Print some info about the encrypted native methods
|
2011-11-25 15:33:13 +01:00 |
|
de4dot
|
51892f62a2
|
Re-encrypt native methods
|
2011-11-25 15:24:12 +01:00 |
|
de4dot
|
07f0376b45
|
Add methods to encrypt resource data, and set new data
|
2011-11-25 15:21:29 +01:00 |
|
de4dot
|
d9a776aa3f
|
Have DeobfuscatorBase implement IWriterListener
|
2011-11-25 15:19:56 +01:00 |
|
de4dot
|
cfe85774ab
|
Method prefix should be an empty string
|
2011-11-25 15:17:12 +01:00 |
|
de4dot
|
900ec1bf07
|
Add code to dump DNR native methods to a file
|
2011-11-25 15:16:50 +01:00 |
|
de4dot
|
b259991415
|
Some fixes:
- Remove empty class only if methods are inlined
- Don't add .cctor methods to possibly-inlined-methods list
|
2011-11-24 23:58:42 +01:00 |
|
de4dot
|
e4e9f6787c
|
New version: 1.3.0
|
2011-11-24 11:01:08 +01:00 |
|
de4dot
|
0516e4540d
|
Remove calls to empty class
|
2011-11-24 10:44:01 +01:00 |
|
de4dot
|
eee2c509be
|
Make sure decrypter type is removed
|
2011-11-24 10:10:39 +01:00 |
|
de4dot
|
17660c225e
|
Update decrypter detection code
|
2011-11-24 10:08:29 +01:00 |
|
de4dot
|
716870b4bd
|
Make sure InitializeComponent() detection code is called
|
2011-11-24 10:07:55 +01:00 |
|
de4dot
|
73d1316b2d
|
Add a new random name regex
|
2011-11-24 07:57:31 +01:00 |
|
de4dot
|
3bfb2e7dc7
|
Update DNR detection
|
2011-11-24 07:49:50 +01:00 |
|
de4dot
|
0c4abcc039
|
Update detection of possibly inlined methods
|
2011-11-24 06:48:23 +01:00 |
|
de4dot
|
e68cedd44b
|
Update tamper code
|
2011-11-24 05:25:34 +01:00 |
|
de4dot
|
a0f5a109dd
|
Add p prefix if it's a pointer type
|
2011-11-24 05:25:04 +01:00 |
|
de4dot
|
9d61d9845d
|
Don't add an override prefix if one of the methods is an iface method
|
2011-11-23 14:39:52 +01:00 |
|
de4dot
|
99d52b90c5
|
Revert older commit and print method override prefix
|
2011-11-23 12:13:41 +01:00 |
|
de4dot
|
4a65770c59
|
Check each part of the namespace instead of all of it at once
|
2011-11-23 11:50:34 +01:00 |
|
de4dot
|
ae5001b239
|
Make sure initializeEventHandlerNames() is called after renaming props
|
2011-11-23 11:34:11 +01:00 |
|
de4dot
|
80f90d3e6a
|
Update regex
|
2011-11-23 11:32:36 +01:00 |
|
de4dot
|
f7b117fe18
|
Restore events
|
2011-11-23 06:41:28 +01:00 |
|
de4dot
|
0c36e74834
|
Add option to disable restoring props/events from method names
|
2011-11-23 05:45:30 +01:00 |
|
de4dot
|
397f5f5b5b
|
Update DNR valid-name-check code
|
2011-11-23 05:28:57 +01:00 |
|
de4dot
|
550ea19c0b
|
Rename nullable types to better names, eg. int_0 instead of nullable_0
|
2011-11-23 05:09:34 +01:00 |
|
de4dot
|
1e22947f6a
|
Don't add prop/event 'other' methods to props/events list
|
2011-11-23 04:42:13 +01:00 |
|
de4dot
|
8d5dae6dcf
|
Update code to pass the new test
|
2011-11-22 15:56:48 +01:00 |
|
de4dot
|
d4c4d0a425
|
Don't add override prefix if scope has 2+ methods
|
2011-11-22 09:49:59 +01:00 |
|
de4dot
|
33f9a466a1
|
Don't add method to overrideMethods if it already overrides that iface method
|
2011-11-22 08:57:10 +01:00 |
|
de4dot
|
45cd6bf211
|
Update the code that renames virtual methods, props, events
|
2011-11-22 08:14:34 +01:00 |
|
de4dot
|
9953111d1c
|
Rename event add/remove methods' last arg to value
|
2011-11-21 11:26:02 +01:00 |
|
de4dot
|
7dbb0144ca
|
Check for null args
|
2011-11-21 11:03:45 +01:00 |
|
de4dot
|
c1ef76fda4
|
Use correct name when renaming event handlers
|
2011-11-21 10:56:18 +01:00 |
|
de4dot
|
d7c55cfbc3
|
Remove old renamer code
|
2011-11-21 10:37:30 +01:00 |
|
de4dot
|
b2b563ef22
|
Add more renamer code
|
2011-11-21 10:36:23 +01:00 |
|
de4dot
|
d014835c7c
|
Add Utils.compareInt32() and use it
|
2011-11-21 10:32:36 +01:00 |
|
de4dot
|
1b0fbfc681
|
Add more renamer code
|
2011-11-18 16:55:54 +01:00 |
|
de4dot
|
e9e0588cb6
|
Use Utils.StartsWith() since mono's impl is buggy
|
2011-11-17 04:22:12 +01:00 |
|
de4dot
|
195c7194cb
|
Rename types
|
2011-11-17 04:17:03 +01:00 |
|
de4dot
|
b58c3843e3
|
Add code to map virtual methods to base/iface methods
|
2011-11-16 23:08:27 +01:00 |
|
de4dot
|
79eb228200
|
Remove module if we don't load it. Restore indent level.
|
2011-11-16 22:59:04 +01:00 |
|
de4dot
|
75ff534ecd
|
Add removeModule(string) and clearAll() methods
|
2011-11-16 22:58:02 +01:00 |
|