de4dot
|
f1a725cd19
|
Restore MaxStack
|
2012-08-21 20:17:35 +02:00 |
|
de4dot
|
58b1b27c69
|
Use correct upper limit in loop, and return false on failure...
|
2012-08-21 20:17:21 +02:00 |
|
de4dot
|
3b9ba16df6
|
Make restoreMethod() virtual
|
2012-08-21 20:14:43 +02:00 |
|
de4dot
|
2c68ae14ee
|
New version: 1.9.1
|
2012-08-21 15:40:23 +02:00 |
|
de4dot
|
64cc8e3856
|
Decrypt CO encrypted methods
|
2012-08-21 15:40:06 +02:00 |
|
de4dot
|
0a5973e541
|
Update detection of CO types
|
2012-08-21 15:06:42 +02:00 |
|
de4dot
|
957a8ab8dd
|
Move method to new CoUtils class
|
2012-08-21 15:04:40 +02:00 |
|
de4dot
|
729780c235
|
Update MethodBodyReaderBase
- Change field types to IList<T>
- Add restoreMethod()
- Add readInstructionsNumBytes()
|
2012-08-21 14:59:46 +02:00 |
|
de4dot
|
bfcd42804e
|
Add getModuleAttribute()
|
2012-08-15 19:33:57 +02:00 |
|
de4dot
|
1768de1d6b
|
Remove earlyDetect()
|
2012-08-13 00:54:46 +02:00 |
|
de4dot
|
47a3034259
|
Call method later
|
2012-08-03 17:57:45 +02:00 |
|
de4dot
|
b455ae8dab
|
Fix arg name
|
2012-08-02 19:53:30 +02:00 |
|
de4dot
|
e496cea7da
|
Add an option to remove a present unbox.any instr
|
2012-08-01 22:20:35 +02:00 |
|
de4dot
|
9cbbea2c01
|
Use a better resource key
|
2012-07-31 12:50:55 +02:00 |
|
de4dot
|
c005ab2998
|
Check for div by zero
|
2012-07-31 12:43:23 +02:00 |
|
de4dot
|
dace82cca9
|
Add find2() method for derived classes
|
2012-07-31 07:13:07 +02:00 |
|
de4dot
|
329efd9a0f
|
Add code to let a derived class to push new values
|
2012-07-31 04:40:45 +02:00 |
|
de4dot
|
87a8052cbe
|
Declaring type is null if it's already been removed
|
2012-07-31 04:40:06 +02:00 |
|
de4dot
|
6be691ab6d
|
Increment errors if there's an exception
|
2012-07-31 04:39:34 +02:00 |
|
de4dot
|
06b7374276
|
Add support for reading r8 values. Also rename some methods
|
2012-07-31 01:14:38 +02:00 |
|
de4dot
|
11256d6e76
|
Make property public
|
2012-07-30 10:26:49 +02:00 |
|
de4dot
|
83b805adc3
|
Move methods
|
2012-07-30 09:17:22 +02:00 |
|
de4dot
|
b2d72b153f
|
Ignore exceptions when calling detect()
Most likely invalid code and/or metadata, which usually means it's still
encrypted.
|
2012-07-29 18:12:29 +02:00 |
|
de4dot
|
de8090df61
|
Add setConstant methods
|
2012-07-29 14:21:13 +02:00 |
|
de4dot
|
c924d84340
|
Add another decrypt() method
|
2012-07-29 13:20:35 +02:00 |
|
de4dot
|
c3c1ab64d8
|
Add setDeobfuscator() method
|
2012-07-29 13:19:12 +02:00 |
|
de4dot
|
f07f664553
|
Don't cast to a possible value type when result can be null
|
2012-07-29 09:49:00 +02:00 |
|
de4dot
|
cb6a3ac503
|
Support generic decrypter methods
|
2012-07-28 04:39:14 +02:00 |
|
de4dot
|
a2c8e99b3f
|
Ignore any exceptions during deobfuscation
|
2012-07-28 04:18:11 +02:00 |
|
de4dot
|
e88479f71d
|
Add OtherMethods prop
|
2012-07-27 08:03:02 +02:00 |
|
de4dot
|
3abb8de345
|
getFieldToMethodDictionary() is now a non-virtual method
|
2012-07-27 07:57:13 +02:00 |
|
de4dot
|
1a1ccb2121
|
Update code since GetUserString() arg is now a token
|
2012-07-26 20:07:27 +02:00 |
|
de4dot
|
bbd41a549c
|
Add MD5 and SHA256 sum methods
|
2012-07-26 16:35:28 +02:00 |
|
de4dot
|
916948249e
|
Add missing null check
|
2012-07-26 16:35:08 +02:00 |
|
de4dot
|
5fc6e1ac75
|
Add method to get a 64-bit int
|
2012-07-25 21:06:35 +02:00 |
|
de4dot
|
423c33a9f2
|
Append 32 to 32-bit methods and fields
|
2012-07-25 20:48:06 +02:00 |
|
de4dot
|
e2ec6548ed
|
Add more ctors and add EmulateConvInstructions prop
|
2012-07-25 20:43:22 +02:00 |
|
de4dot
|
755c9ae21a
|
New version: 1.9.0
|
2012-07-24 20:08:09 +02:00 |
|
de4dot
|
a815a70415
|
Rename arrays
|
2012-07-24 19:58:00 +02:00 |
|
de4dot
|
880441571e
|
Update class comment
|
2012-07-24 19:52:34 +02:00 |
|
de4dot
|
c31e6c2c3d
|
Main embedded asm doesn't always have the same asm name as the original asm
|
2012-07-24 19:05:50 +02:00 |
|
de4dot
|
e1f8793302
|
Add option to disable decrypting main embedded assembly
|
2012-07-24 18:52:39 +02:00 |
|
de4dot
|
490ce203b6
|
Update invalid name regex
|
2012-07-24 18:13:18 +02:00 |
|
de4dot
|
e54b026ae7
|
Make the embedded (original) start up assembly the new decrypted assembly
|
2012-07-24 17:49:04 +02:00 |
|
de4dot
|
4374a08020
|
getDecryptedModule() can now be called multiple times
|
2012-07-24 17:02:27 +02:00 |
|
de4dot
|
c8477bdbce
|
Print a warning and use default encoding if the code page doesn't exist
|
2012-07-23 13:19:04 +02:00 |
|
de4dot
|
8a81e98b3f
|
Fix invalid Mvid
|
2012-07-23 13:15:32 +02:00 |
|
de4dot
|
6c04a950e7
|
Remove duplicate resources
|
2012-07-23 10:22:39 +02:00 |
|
de4dot
|
b03cb46f53
|
Rename class
|
2012-07-23 10:08:13 +02:00 |
|
de4dot
|
ebbc8d2ab8
|
Remove encoding arg
|
2012-07-23 10:04:40 +02:00 |
|