de4dot
|
823d3b07a7
|
Refactor string decrypter
|
2011-12-21 19:22:23 +01:00 |
|
de4dot
|
d24da2f24c
|
Move method to base class
|
2011-12-21 19:21:06 +01:00 |
|
de4dot
|
f87fabd6aa
|
Move DNR v3 and v4 code to a DNR sub dir
|
2011-12-21 18:55:36 +01:00 |
|
de4dot
|
03ff9a61cb
|
Update strings
|
2011-12-21 18:30:37 +01:00 |
|
de4dot
|
a473f9eb02
|
Remove native lib linked resource
|
2011-12-21 18:20:59 +01:00 |
|
de4dot
|
4abe33f729
|
Remove obfuscator init calls from .ctors
|
2011-12-21 18:12:04 +01:00 |
|
de4dot
|
9136e674e5
|
Add anti strong name code
|
2011-12-21 18:04:49 +01:00 |
|
de4dot
|
1fd7319b19
|
Move patcher code to DecrypterType
|
2011-12-21 16:56:12 +01:00 |
|
de4dot
|
1e7dbfad97
|
Refactor
|
2011-12-21 07:13:19 +01:00 |
|
de4dot
|
2a651f5b5e
|
Update code and fix some bugs
|
2011-12-21 06:41:42 +01:00 |
|
de4dot
|
289c11b296
|
Refactor
|
2011-12-21 06:41:06 +01:00 |
|
de4dot
|
795ab8bee1
|
Update detection code
|
2011-12-21 06:40:10 +01:00 |
|
de4dot
|
13b84383f2
|
Update detection code
|
2011-12-21 06:39:56 +01:00 |
|
de4dot
|
134c20c794
|
Add Win32Path class
|
2011-12-21 06:39:12 +01:00 |
|
de4dot
|
25869c9ff8
|
Add FileHeaderOffset property
|
2011-12-21 06:38:44 +01:00 |
|
de4dot
|
74b8299ef2
|
Remove native lib module refs
|
2011-12-21 00:41:09 +01:00 |
|
de4dot
|
c516d61ad7
|
Decrypt library mode files
|
2011-12-21 00:31:27 +01:00 |
|
de4dot
|
15b4cefe89
|
Move method to base class
|
2011-12-21 00:30:17 +01:00 |
|
de4dot
|
0d92b37536
|
Create DNR3 dir
|
2011-12-20 21:47:45 +01:00 |
|
de4dot
|
dd60af245a
|
Unpack DNR 3.x application mode files
|
2011-12-20 20:16:57 +01:00 |
|
de4dot
|
746997dfe3
|
Add DNR 3.x application mode unpacker
|
2011-12-20 20:16:18 +01:00 |
|
de4dot
|
4a0a3fb2fc
|
Add isCompressed() method
|
2011-12-20 20:13:37 +01:00 |
|
de4dot
|
87b4f70de9
|
Add decrypt() method
|
2011-12-20 20:13:08 +01:00 |
|
de4dot
|
4444b143fd
|
Add method to get int32 array
|
2011-12-20 20:12:47 +01:00 |
|
de4dot
|
b60d53ea77
|
Add some more methods
|
2011-12-20 20:11:32 +01:00 |
|
de4dot
|
bc5d829714
|
Also check ldftn opcodes
|
2011-12-19 15:44:23 +01:00 |
|
de4dot
|
f7f77a821c
|
Use the SetMethod property
|
2011-12-19 15:43:40 +01:00 |
|
de4dot
|
b96ab54ba6
|
New version: 1.3.8
|
2011-12-16 19:34:55 +01:00 |
|
de4dot
|
dd8d0d0e83
|
Use new method/field dictionaries
|
2011-12-16 19:33:44 +01:00 |
|
de4dot
|
f30b0ef749
|
Add type, method, field, prop, event dictionaries
|
2011-12-16 18:56:45 +01:00 |
|
de4dot
|
2a0e92eaff
|
Assembly resolver now parses *.config files
|
2011-12-15 16:28:27 +01:00 |
|
de4dot
|
d35e92b53c
|
Update field type
|
2011-12-15 16:17:04 +01:00 |
|
de4dot
|
929d943112
|
Update deobfuscator
|
2011-12-15 16:16:21 +01:00 |
|
de4dot
|
c73459f1be
|
New version: 1.3.7
|
2011-12-11 12:38:48 +01:00 |
|
de4dot
|
00f7b7feda
|
The real Main() may be called from a DNR-created Main() method
|
2011-12-11 11:08:32 +01:00 |
|
de4dot
|
78bb21832e
|
Fix bug by resetting stream offset
|
2011-12-09 23:43:02 +01:00 |
|
de4dot
|
e7ea01f87d
|
Move console code to new de4dot.cui assembly
|
2011-12-09 09:02:06 +01:00 |
|
de4dot
|
0fd4ddf209
|
Change type from ez to ef
|
2011-12-08 09:53:13 +01:00 |
|
de4dot
|
5247927eff
|
Update regex
|
2011-12-08 09:52:23 +01:00 |
|
de4dot
|
5b7806cc1f
|
New version: 1.3.6
|
2011-12-06 17:38:30 +01:00 |
|
de4dot
|
5ccc8e0fda
|
Add prop/event override prefix
|
2011-12-06 02:45:28 +01:00 |
|
de4dot
|
731d302741
|
Pass the getter and setter methods to createProperty()
|
2011-12-05 23:47:48 +01:00 |
|
de4dot
|
6073106cfe
|
Restore explicitly overridden props/events
|
2011-12-05 18:11:34 +01:00 |
|
de4dot
|
04940d785c
|
Update version: 1.3.5
|
2011-12-04 20:02:18 +01:00 |
|
de4dot
|
b2801872d7
|
Update detection of invalid types when restoring field/method arg types
|
2011-12-04 20:01:02 +01:00 |
|
de4dot
|
427abbce79
|
Update detection of WinForms field names
|
2011-12-04 19:09:21 +01:00 |
|
de4dot
|
99cec56165
|
Update renamer code. Check for unresolved type and generic params
|
2011-12-04 18:22:47 +01:00 |
|
de4dot
|
7a6af40832
|
Update version: 1.3.4
|
2011-12-03 14:33:37 +01:00 |
|
de4dot
|
c9d4dc2268
|
Update renamer code so a compiler can compile the decompiled output
- property Byte[]_0 => Byte_0
- property ICollection.Boolean_0 => ICollection.IsSynchronized
- property pByte_0 => PByte_0
- property T_0 => Prop_0
- property indexer => Item
|
2011-12-03 14:28:10 +01:00 |
|
de4dot
|
0d18298b49
|
It's no longer beta! :)
|
2011-12-02 18:50:36 +01:00 |
|
de4dot
|
973e958ff1
|
Add better check for invalid entries
|
2011-12-02 18:48:01 +01:00 |
|
de4dot
|
0db4222c10
|
Update version: 1.3.3
|
2011-12-02 15:21:18 +01:00 |
|
de4dot
|
160527447c
|
Fix bug in methods decrypter
|
2011-12-02 15:20:27 +01:00 |
|
de4dot
|
b8564335b8
|
Remove stack frame helper code only if the option is enabled
|
2011-12-02 15:20:09 +01:00 |
|
de4dot
|
49701686e5
|
Update version: 1.3.2
|
2011-12-02 13:19:38 +01:00 |
|
de4dot
|
af0ff59794
|
Always rename P/Invoke methods
|
2011-12-02 13:18:22 +01:00 |
|
de4dot
|
d913c61df6
|
Fix some todos
|
2011-12-02 00:43:49 +01:00 |
|
de4dot
|
2734a9ee95
|
Update the code that resolves typedefs
|
2011-12-01 22:32:09 +01:00 |
|
de4dot
|
d6ba1fa2d5
|
Add p prefix to types
|
2011-12-01 22:30:43 +01:00 |
|
de4dot
|
ec896da8ab
|
Unpack .NET 1.x DNR native images
|
2011-12-01 14:16:23 +01:00 |
|
de4dot
|
82d1de5ae3
|
Remove *-x86 projects. Default is now x86.
|
2011-11-30 20:38:59 +01:00 |
|
de4dot
|
2f58cea471
|
Update the code
|
2011-11-30 20:27:49 +01:00 |
|
de4dot
|
2174011a35
|
Print a message after unpacking a native file
|
2011-11-30 20:22:52 +01:00 |
|
de4dot
|
3311e28a87
|
Don't re-read native file after unpacking it
|
2011-11-30 20:19:50 +01:00 |
|
de4dot
|
68d962fb6e
|
Return null if inflated data isn't an MZ file
|
2011-11-30 19:10:56 +01:00 |
|
de4dot
|
8637ef5e1a
|
Unpack DNR 4.0-4.4 + .NET 2.0+ native files
|
2011-11-30 19:06:25 +01:00 |
|
de4dot
|
20a10c92ee
|
Warn if unpacked data could not be loaded
|
2011-11-30 19:05:20 +01:00 |
|
de4dot
|
fde811d183
|
Move isCode() to DeobUtils
|
2011-11-30 19:04:49 +01:00 |
|
de4dot
|
b7a44b459d
|
Add code to unpack DNR 4.0/4.1 + .NET 2.0+ native files
|
2011-11-30 18:28:48 +01:00 |
|
de4dot
|
f567e09845
|
Add 'using de4dot.PE'
|
2011-11-30 18:27:01 +01:00 |
|
de4dot
|
28ec2485fc
|
Update code to handle unpacked native images
|
2011-11-30 18:26:36 +01:00 |
|
de4dot
|
26f4afeff3
|
Rename class to StreamXXX if it's a stream class
|
2011-11-30 18:24:43 +01:00 |
|
de4dot
|
27e7c76636
|
Add code to read win32 resources
|
2011-11-30 18:23:47 +01:00 |
|
de4dot
|
98342f2a0c
|
Move read file code to Utils
|
2011-11-30 18:21:01 +01:00 |
|
de4dot
|
4a26534ad0
|
Don't remove proxy delegate types and creator type if errors were detected
|
2011-11-28 11:45:48 +01:00 |
|
de4dot
|
d7c42185a8
|
Update detection of CliSecureRT type
|
2011-11-28 11:25:18 +01:00 |
|
de4dot
|
dab8907f8c
|
Detect EZ version
|
2011-11-27 08:28:17 +01:00 |
|
de4dot
|
04ae6e116f
|
New version: 1.3.1
|
2011-11-26 12:34:59 +01:00 |
|
de4dot
|
a90fd1fa2f
|
Update detection of the empty class
|
2011-11-26 12:34:17 +01:00 |
|
de4dot
|
cec8758ed2
|
Check if there are any refs left to the decrypter type
|
2011-11-26 12:21:18 +01:00 |
|
de4dot
|
df6678626e
|
Print total number of encrypted methods
|
2011-11-26 12:20:04 +01:00 |
|
de4dot
|
0ce27f8a2d
|
Print some info about the encrypted native methods
|
2011-11-25 15:33:13 +01:00 |
|
de4dot
|
51892f62a2
|
Re-encrypt native methods
|
2011-11-25 15:24:12 +01:00 |
|
de4dot
|
07f0376b45
|
Add methods to encrypt resource data, and set new data
|
2011-11-25 15:21:29 +01:00 |
|
de4dot
|
d9a776aa3f
|
Have DeobfuscatorBase implement IWriterListener
|
2011-11-25 15:19:56 +01:00 |
|
de4dot
|
cfe85774ab
|
Method prefix should be an empty string
|
2011-11-25 15:17:12 +01:00 |
|
de4dot
|
900ec1bf07
|
Add code to dump DNR native methods to a file
|
2011-11-25 15:16:50 +01:00 |
|
de4dot
|
b259991415
|
Some fixes:
- Remove empty class only if methods are inlined
- Don't add .cctor methods to possibly-inlined-methods list
|
2011-11-24 23:58:42 +01:00 |
|
de4dot
|
e4e9f6787c
|
New version: 1.3.0
|
2011-11-24 11:01:08 +01:00 |
|
de4dot
|
0516e4540d
|
Remove calls to empty class
|
2011-11-24 10:44:01 +01:00 |
|
de4dot
|
eee2c509be
|
Make sure decrypter type is removed
|
2011-11-24 10:10:39 +01:00 |
|
de4dot
|
17660c225e
|
Update decrypter detection code
|
2011-11-24 10:08:29 +01:00 |
|
de4dot
|
716870b4bd
|
Make sure InitializeComponent() detection code is called
|
2011-11-24 10:07:55 +01:00 |
|
de4dot
|
73d1316b2d
|
Add a new random name regex
|
2011-11-24 07:57:31 +01:00 |
|
de4dot
|
3bfb2e7dc7
|
Update DNR detection
|
2011-11-24 07:49:50 +01:00 |
|
de4dot
|
0c4abcc039
|
Update detection of possibly inlined methods
|
2011-11-24 06:48:23 +01:00 |
|
de4dot
|
e68cedd44b
|
Update tamper code
|
2011-11-24 05:25:34 +01:00 |
|
de4dot
|
a0f5a109dd
|
Add p prefix if it's a pointer type
|
2011-11-24 05:25:04 +01:00 |
|
de4dot
|
9d61d9845d
|
Don't add an override prefix if one of the methods is an iface method
|
2011-11-23 14:39:52 +01:00 |
|
de4dot
|
99d52b90c5
|
Revert older commit and print method override prefix
|
2011-11-23 12:13:41 +01:00 |
|