de4dot
|
948d5c1744
|
Only use the DNR inline method hack if it's a static method
|
2011-10-20 03:34:05 +02:00 |
|
de4dot
|
f79b12d4f3
|
Make sure blocks are laid out in a verifiable order
|
2011-10-20 02:58:30 +02:00 |
|
de4dot
|
865cfb9536
|
Get rid of the useless list
|
2011-10-20 02:45:55 +02:00 |
|
de4dot
|
c8500b4f33
|
Remove unused local variables
|
2011-10-20 02:38:44 +02:00 |
|
de4dot
|
c3d6e25ad7
|
Add instructions that clear the stack
|
2011-10-20 01:43:33 +02:00 |
|
de4dot
|
c643755267
|
Add updated cecil submodule
|
2011-10-20 01:40:15 +02:00 |
|
de4dot
|
debc4b346a
|
Nops are removed
|
2011-10-20 00:47:38 +02:00 |
|
de4dot
|
28f95d386e
|
Fix problem with dup, and don't include nops
|
2011-10-20 00:36:30 +02:00 |
|
de4dot
|
d7c61c65fe
|
Remove pop instrs and code that pushes the value
|
2011-10-19 15:49:19 +02:00 |
|
de4dot
|
f519d6f6d8
|
Update switch cflow deob code to handle more cases
|
2011-10-19 09:13:27 +02:00 |
|
de4dot
|
7fe71a963a
|
Add inline bool method hack for DNR
|
2011-10-19 01:53:42 +02:00 |
|
de4dot
|
80acf1d59f
|
Add switch cflow deobfuscator
|
2011-10-18 23:31:50 +02:00 |
|
de4dot
|
f374308d1e
|
Emulate instrs only if last instr is bcc/switch
|
2011-10-18 08:28:23 +02:00 |
|
de4dot
|
98936364f7
|
Add code to emulate switch and ldelem
|
2011-10-18 08:17:21 +02:00 |
|
de4dot
|
de8e63d140
|
Emulate more instructions
|
2011-10-17 21:34:00 +02:00 |
|
de4dot
|
122878a094
|
Update div and rem emu code
|
2011-10-17 20:19:17 +02:00 |
|
de4dot
|
778bc7e940
|
Fix some copy paste errors. Update add/sub emu code
|
2011-10-17 09:06:46 +02:00 |
|
de4dot
|
d34184f811
|
Return 0 if we emulate x - x
|
2011-10-17 07:55:06 +02:00 |
|
de4dot
|
fdd3c119f5
|
Make sure the unknown bool is pushed
|
2011-10-17 07:51:20 +02:00 |
|
de4dot
|
718cdb0487
|
Add validMask field to Int32/64Value
|
2011-10-17 07:28:53 +02:00 |
|
de4dot
|
05065d6ac7
|
Start work on new cflow deobfuscator
|
2011-10-17 00:22:22 +02:00 |
|
de4dot
|
b6a994700c
|
Cecil submodule was updated
|
2011-10-13 22:33:52 +02:00 |
|
de4dot
|
dabad1e177
|
Cecil submodule was updated
|
2011-10-13 20:17:50 +02:00 |
|
de4dot
|
4c43807de7
|
Detect SA 1.x-5.1 assemblies
|
2011-10-13 12:22:17 +02:00 |
|
de4dot
|
01da4a979f
|
Also make sure type.Name is empty
|
2011-10-12 23:30:57 +02:00 |
|
de4dot
|
58ff833d5c
|
Detect SA 4.x, 5.0, 5.1
|
2011-10-12 23:16:03 +02:00 |
|
de4dot
|
b3463a3859
|
Remove automated error reporting code from SA 4.x assemblies
|
2011-10-12 22:50:19 +02:00 |
|
de4dot
|
9ed55629e6
|
Print deobfuscated method if -vv
|
2011-10-12 19:47:51 +02:00 |
|
de4dot
|
38b08dddfd
|
Update DF version attribute parsing
|
2011-10-10 18:39:42 +02:00 |
|
de4dot
|
08f5b04675
|
Fix a problem with String.StartsWith() on mono
|
2011-10-09 13:19:26 +02:00 |
|
de4dot
|
8469b84cc2
|
Add updated cecil submodule
|
2011-10-09 13:05:43 +02:00 |
|
de4dot
|
2f5ded924f
|
Get rid of dead code
|
2011-10-09 12:01:51 +02:00 |
|
de4dot
|
9ade539ecd
|
Update version to 1.0.3
|
2011-10-08 20:03:10 +02:00 |
|
de4dot
|
5fbda45d6d
|
Add earlyDetect() method to IDeobfuscator
|
2011-10-08 19:33:12 +02:00 |
|
de4dot
|
d305faae09
|
Detect another obfuscator
|
2011-10-08 18:43:22 +02:00 |
|
de4dot
|
5eb824693e
|
Don't throw if invalid visibility
|
2011-10-08 18:42:09 +02:00 |
|
de4dot
|
c94fea2bfc
|
Remove assembly if --one-file option is used
|
2011-10-08 15:01:51 +02:00 |
|
de4dot
|
12686b9968
|
Add updated cecil submodule
|
2011-10-08 15:01:14 +02:00 |
|
de4dot
|
ae9f59c918
|
Less memory are used when loading files one at a time
|
2011-10-08 13:33:48 +02:00 |
|
de4dot
|
3719e9a375
|
AssemblyResolver can now remove old unused assemblies
|
2011-10-08 13:28:39 +02:00 |
|
de4dot
|
d3fa227f1e
|
Update -ru option text
|
2011-10-08 12:30:35 +02:00 |
|
de4dot
|
bea3a737d2
|
Don't rename resource if old name was empty string
|
2011-10-08 12:17:01 +02:00 |
|
de4dot
|
d69b1b465c
|
Fix SA string decryption problem
|
2011-10-07 17:32:03 +02:00 |
|
de4dot
|
56da16086b
|
Make sure user tries latest version...
|
2011-10-07 17:31:27 +02:00 |
|
de4dot
|
8ec3da7080
|
Update detection and some strings
|
2011-10-07 17:30:41 +02:00 |
|
de4dot
|
4cca5190da
|
Detect another new obfuscator
|
2011-10-07 08:45:40 +02:00 |
|
de4dot
|
e4cc4672d2
|
Cecil submodule was updated
|
2011-10-06 10:47:11 +02:00 |
|
de4dot
|
fa3a6457de
|
Detects a few more obfuscators
|
2011-10-06 10:33:13 +02:00 |
|
de4dot
|
820300e3b2
|
Now using module.ResolveMethod(token) to resolve string decrypter methods
|
2011-10-06 08:59:05 +02:00 |
|
de4dot
|
1c721b017e
|
Detect some unsupported obfuscators
|
2011-10-05 17:22:56 +02:00 |
|