de4dot
|
ac9168599b
|
Use IPEImage.FindWin32ResourceData()
|
2012-11-12 04:40:48 +01:00 |
|
de4dot
|
3646bca56b
|
Align the numbers
|
2012-11-11 16:56:29 +01:00 |
|
de4dot
|
99b38ac22f
|
Don't Dispose() of the resource data reader
|
2012-11-11 14:46:00 +01:00 |
|
de4dot
|
c47039c2ef
|
Don't call logger.v() unless verbose log level is enabled
|
2012-11-11 11:37:40 +01:00 |
|
de4dot
|
5a9d76e8c7
|
Speed up DeepSea string decrypter detector
|
2012-11-11 07:54:26 +01:00 |
|
de4dot
|
b152362088
|
Update logger
- It's not static anymore
- It implements ILogger
- It can ignore errors/warnings but an option to disable it
|
2012-11-11 05:41:54 +01:00 |
|
de4dot
|
7b0ba43248
|
UTF8String was moved to DotNet ns. Fix code
|
2012-11-10 00:45:04 +01:00 |
|
de4dot
|
311a3c9c05
|
Remove now useless using statements
|
2012-11-10 00:02:11 +01:00 |
|
de4dot
|
73e15c0919
|
Change method sig to take a IPEImage instead of a PEImage
|
2012-11-09 11:34:23 +01:00 |
|
de4dot
|
d47a03f51a
|
Unpack CS packed files
|
2012-11-09 11:32:29 +01:00 |
|
de4dot
|
d00fcb79e4
|
Don't remove fields if we should keep all types
|
2012-11-09 02:15:28 +01:00 |
|
de4dot
|
3b740a4106
|
Port DeepSea deobfuscator
|
2012-11-09 00:21:45 +01:00 |
|
de4dot
|
5d25a499aa
|
Port CryptoObfuscator deobfuscator
|
2012-11-08 22:24:13 +01:00 |
|
de4dot
|
472d57ed0f
|
Use ModuleDefMD.GetAssemblyRef()
|
2012-11-08 11:26:14 +01:00 |
|
de4dot
|
f2f156dc40
|
Port CodeWall deobfuscator
|
2012-11-08 10:40:58 +01:00 |
|
de4dot
|
eb7d4c5f88
|
Use CreateStream() instead of creating a MemoryStream from a byte[]
|
2012-11-08 10:16:58 +01:00 |
|
de4dot
|
f6b5a3117f
|
Port CodeVeil deobfuscator
|
2012-11-08 09:48:05 +01:00 |
|
de4dot
|
10e83acebc
|
Port CodeFort deobfuscator
|
2012-11-08 07:43:57 +01:00 |
|
de4dot
|
4393df31d9
|
Update detection of CSVM asm ref
|
2012-11-08 07:07:02 +01:00 |
|
de4dot
|
f699017197
|
Port Babel.NET deobfuscator
|
2012-11-08 07:06:46 +01:00 |
|
de4dot
|
ce6659510e
|
Use ToGenericInstSig() ext method
|
2012-11-08 07:05:41 +01:00 |
|
de4dot
|
e600696182
|
Use IBinaryReader.ReadRemainingBytes()
|
2012-11-07 07:29:39 +01:00 |
|
de4dot
|
ab78e97423
|
Use the new name of this obfuscator
|
2012-11-07 05:47:33 +01:00 |
|
de4dot
|
9c64165d15
|
Add a getDumpedMethod() method
|
2012-11-07 05:38:06 +01:00 |
|
de4dot
|
583d4201f5
|
Port Agile.NET deobfuscator
|
2012-11-07 05:17:45 +01:00 |
|
de4dot
|
cc1e36389d
|
Update resolve{Method,Field}() sigs with a more general arg type
|
2012-11-07 04:46:19 +01:00 |
|
de4dot
|
814c3d3944
|
Fix method decrypter
|
2012-11-07 04:45:36 +01:00 |
|
de4dot
|
b6537dc188
|
Fix lookup<T> method sigs
|
2012-11-07 04:45:05 +01:00 |
|
de4dot
|
6efb96740d
|
Update code since EntryPoint was renamed ManagedEntryPoint
|
2012-11-07 02:02:38 +01:00 |
|
de4dot
|
427ea38595
|
Port MPRESS unpacker
|
2012-11-07 01:52:15 +01:00 |
|
de4dot
|
d98d4b10bb
|
Add code to restore dumped methods
|
2012-11-07 01:15:52 +01:00 |
|
de4dot
|
4be7e4fe46
|
Initialize DumpedMethod.mdRVA
|
2012-11-07 00:26:36 +01:00 |
|
de4dot
|
001b67804f
|
Move DumpedMethod{,s} to de4dot.blocks namespace
|
2012-11-06 22:25:19 +01:00 |
|
de4dot
|
90ab31eda2
|
Port Rummage deobfuscator
|
2012-11-06 17:21:56 +01:00 |
|
de4dot
|
25cee0e206
|
Port Skater.NET deobfuscator
|
2012-11-06 17:15:11 +01:00 |
|
de4dot
|
19ed1ac219
|
Rename CliSecure -> Agile_NET
|
2012-11-06 16:38:39 +01:00 |
|
de4dot
|
c67c267c8e
|
Port Dotfuscator deobfuscator
|
2012-11-06 16:30:39 +01:00 |
|
de4dot
|
ac171e3f29
|
Fix code since CilBody/HasCilBody were renamed
|
2012-11-06 15:58:55 +01:00 |
|
de4dot
|
3ed2daebd1
|
Port Xenocode deobfuscator
|
2012-11-06 15:58:21 +01:00 |
|
de4dot
|
f5ec3e2a27
|
String can be empty so return early if so
|
2012-11-06 01:59:40 +01:00 |
|
de4dot
|
c8039d249e
|
Add more checks when input has lots of invalid metadata
|
2012-11-06 00:18:02 +01:00 |
|
de4dot
|
6d45a3499f
|
Fix porting mistakes
|
2012-11-05 19:21:33 +01:00 |
|
de4dot
|
ea001865c9
|
Rename FnPtr args, and also null type sigs params
|
2012-11-05 02:42:48 +01:00 |
|
de4dot
|
2aedcc730c
|
Preserve tokens if necessary
|
2012-11-04 23:24:12 +01:00 |
|
de4dot
|
c9f1f8073e
|
MethodDef.Parameters contains the hidden 'this' param, so add some fixes to old code
|
2012-11-04 22:41:45 +01:00 |
|
de4dot
|
6a8e8dcb78
|
Initialize loaded modules' module context
|
2012-11-04 20:06:58 +01:00 |
|
de4dot
|
d5838aa6c2
|
Use the IModuleWriterListener interface
|
2012-11-04 19:40:36 +01:00 |
|
de4dot
|
f4ce67d836
|
Remove useless class and fix a porting todo
|
2012-11-04 13:25:14 +01:00 |
|
de4dot
|
83cb59718a
|
Move GenericArgsSubstitutor and add more methods
|
2012-11-04 12:13:13 +01:00 |
|
de4dot
|
f7f424efe7
|
Remove more "#if PORT"
|
2012-11-04 11:50:10 +01:00 |
|