de4dot
|
f07f664553
|
Don't cast to a possible value type when result can be null
|
2012-07-29 09:49:00 +02:00 |
|
de4dot
|
cb6a3ac503
|
Support generic decrypter methods
|
2012-07-28 04:39:14 +02:00 |
|
de4dot
|
a2c8e99b3f
|
Ignore any exceptions during deobfuscation
|
2012-07-28 04:18:11 +02:00 |
|
de4dot
|
e88479f71d
|
Add OtherMethods prop
|
2012-07-27 08:03:02 +02:00 |
|
de4dot
|
3abb8de345
|
getFieldToMethodDictionary() is now a non-virtual method
|
2012-07-27 07:57:13 +02:00 |
|
de4dot
|
1a1ccb2121
|
Update code since GetUserString() arg is now a token
|
2012-07-26 20:07:27 +02:00 |
|
de4dot
|
bbd41a549c
|
Add MD5 and SHA256 sum methods
|
2012-07-26 16:35:28 +02:00 |
|
de4dot
|
916948249e
|
Add missing null check
|
2012-07-26 16:35:08 +02:00 |
|
de4dot
|
5fc6e1ac75
|
Add method to get a 64-bit int
|
2012-07-25 21:06:35 +02:00 |
|
de4dot
|
423c33a9f2
|
Append 32 to 32-bit methods and fields
|
2012-07-25 20:48:06 +02:00 |
|
de4dot
|
e2ec6548ed
|
Add more ctors and add EmulateConvInstructions prop
|
2012-07-25 20:43:22 +02:00 |
|
de4dot
|
755c9ae21a
|
New version: 1.9.0
|
2012-07-24 20:08:09 +02:00 |
|
de4dot
|
a815a70415
|
Rename arrays
|
2012-07-24 19:58:00 +02:00 |
|
de4dot
|
880441571e
|
Update class comment
|
2012-07-24 19:52:34 +02:00 |
|
de4dot
|
c31e6c2c3d
|
Main embedded asm doesn't always have the same asm name as the original asm
|
2012-07-24 19:05:50 +02:00 |
|
de4dot
|
e1f8793302
|
Add option to disable decrypting main embedded assembly
|
2012-07-24 18:52:39 +02:00 |
|
de4dot
|
490ce203b6
|
Update invalid name regex
|
2012-07-24 18:13:18 +02:00 |
|
de4dot
|
e54b026ae7
|
Make the embedded (original) start up assembly the new decrypted assembly
|
2012-07-24 17:49:04 +02:00 |
|
de4dot
|
4374a08020
|
getDecryptedModule() can now be called multiple times
|
2012-07-24 17:02:27 +02:00 |
|
de4dot
|
c8477bdbce
|
Print a warning and use default encoding if the code page doesn't exist
|
2012-07-23 13:19:04 +02:00 |
|
de4dot
|
8a81e98b3f
|
Fix invalid Mvid
|
2012-07-23 13:15:32 +02:00 |
|
de4dot
|
6c04a950e7
|
Remove duplicate resources
|
2012-07-23 10:22:39 +02:00 |
|
de4dot
|
b03cb46f53
|
Rename class
|
2012-07-23 10:08:13 +02:00 |
|
de4dot
|
ebbc8d2ab8
|
Remove encoding arg
|
2012-07-23 10:04:40 +02:00 |
|
de4dot
|
74aaf19257
|
Support the latest CO build
|
2012-07-22 20:35:33 +02:00 |
|
de4dot
|
2320c458cf
|
Check for null (invalid method ref in call instr)
|
2012-07-21 23:13:34 +02:00 |
|
de4dot
|
762e043236
|
Merge branch 'co' into new_code
Conflicts:
de4dot.code/de4dot.code.csproj
de4dot.code/deobfuscators/CryptoObfuscator/Deobfuscator.cs
|
2012-07-21 12:14:04 +02:00 |
|
de4dot
|
940aa20534
|
Merge branch 'master' into new_code
Conflicts:
de4dot.code/de4dot.code.csproj
|
2012-07-21 11:24:32 +02:00 |
|
de4dot
|
fd9d4a40cc
|
Support another MC runtime
|
2012-07-21 11:13:59 +02:00 |
|
de4dot
|
816ff5f369
|
New version: 1.8.7
|
2012-07-20 21:55:12 +02:00 |
|
de4dot
|
e05bfc9c8a
|
Decrypt strings
|
2012-07-20 21:54:56 +02:00 |
|
de4dot
|
dfafc4a94b
|
Remove useless method
|
2012-07-20 18:32:49 +02:00 |
|
de4dot
|
9b48632354
|
Refactor
|
2012-07-20 18:15:40 +02:00 |
|
de4dot
|
8b82f8b47d
|
Support the latest MC versions
|
2012-07-20 14:49:47 +02:00 |
|
de4dot
|
1eaa9f8c51
|
Add verify methods
|
2012-07-20 14:48:19 +02:00 |
|
de4dot
|
d9b3a81ba9
|
Add little endian encrypt/decrypt methods
|
2012-07-20 14:47:55 +02:00 |
|
de4dot
|
9b71da3633
|
Remove call to InitializeArray
|
2012-07-18 14:39:27 +02:00 |
|
de4dot
|
d0712b46aa
|
Update detection of resource resolver class
|
2012-07-16 20:00:37 +02:00 |
|
de4dot
|
6766c10969
|
Split array state into a new class
|
2012-07-16 19:59:50 +02:00 |
|
de4dot
|
ca65972c64
|
Add a force option to deobfuscate() method
|
2012-07-16 18:02:32 +02:00 |
|
de4dot
|
2aa3c8aaea
|
Add constants decrypter
|
2012-07-11 08:05:06 +02:00 |
|
de4dot
|
8f2f2f46ce
|
Support latest CO build
|
2012-07-11 02:15:33 +02:00 |
|
de4dot
|
9f8cac4dac
|
Fix #56
|
2012-07-08 08:14:36 +02:00 |
|
de4dot
|
598529a039
|
Support calli instruction
|
2012-07-08 04:18:26 +02:00 |
|
de4dot
|
16d5a31640
|
Create a SentinelType
|
2012-07-08 03:50:50 +02:00 |
|
de4dot
|
1581ec959d
|
Merge branch 'master' into new_code
|
2012-07-07 19:35:54 +02:00 |
|
de4dot
|
1867a06e84
|
Continue if same method
|
2012-07-07 09:09:55 +02:00 |
|
de4dot
|
ad6c6401b9
|
Support VS2008
|
2012-07-07 07:16:55 +02:00 |
|
de4dot
|
e440270a63
|
Fix proxy calls
|
2012-07-07 01:59:03 +02:00 |
|
de4dot
|
0a5764a093
|
Change method to take a ref to a type
|
2012-07-07 00:58:18 +02:00 |
|
de4dot
|
02c89550cb
|
Update the counter
|
2012-07-05 23:19:37 +02:00 |
|
de4dot
|
d5c8f6842a
|
Update log string
|
2012-07-02 21:49:59 +02:00 |
|
de4dot
|
8a34b6e015
|
Make method static
|
2012-07-02 21:49:45 +02:00 |
|
de4dot
|
b9e88972ae
|
Support latest CO build
|
2012-07-02 14:26:00 +02:00 |
|
de4dot
|
23697e2c00
|
Support ILP 1.0.5
|
2012-07-01 16:23:51 +02:00 |
|
de4dot
|
4c5fa3e809
|
Remove ILP detection
|
2012-06-27 15:19:09 +02:00 |
|
de4dot
|
4236514691
|
Merge branch 'ilp' into new_code
|
2012-06-27 15:15:55 +02:00 |
|
de4dot
|
a2baf1fdea
|
Merge branch 'master' into new_code
|
2012-06-27 15:15:03 +02:00 |
|
de4dot
|
4dce00b35a
|
Merge branch 'rummage' into new_code
Conflicts:
de4dot.cui/Program.cs
|
2012-06-27 15:14:40 +02:00 |
|
de4dot
|
199a0b4043
|
New version: 1.8.6
|
2012-06-27 10:46:12 +02:00 |
|
de4dot
|
12797ecb03
|
Support latest CO build
|
2012-06-27 10:45:45 +02:00 |
|
de4dot
|
cd0a193bdf
|
Support latest AN build
|
2012-06-27 10:27:16 +02:00 |
|
de4dot
|
d1259460e3
|
Update detection of decrypter constants. Fixes #59
|
2012-06-25 01:14:26 +02:00 |
|
de4dot
|
fa594c6213
|
Add better BL support
|
2012-06-12 11:15:19 +02:00 |
|
de4dot
|
4a29eae1c8
|
Add more inflate() overloads
|
2012-06-11 21:20:14 +02:00 |
|
de4dot
|
31118c11ba
|
Add the code from SharpZipLib that de4dot uses
|
2012-06-11 21:18:03 +02:00 |
|
de4dot
|
b964996388
|
Support Babel.NET 5.5
|
2012-06-06 21:16:32 +02:00 |
|
de4dot
|
a8bf74ca78
|
Support Rummage
|
2012-06-06 11:40:48 +02:00 |
|
de4dot
|
6d675fea54
|
Add XTEA decrypter
|
2012-06-06 11:39:48 +02:00 |
|
de4dot
|
3264bfc5cd
|
Support latest CO build
|
2012-06-04 09:51:07 +02:00 |
|
de4dot
|
5567c9a06a
|
Warn if strings resource couldn't be found
|
2012-06-04 06:34:32 +02:00 |
|
de4dot
|
3582b773ca
|
Support ILP
|
2012-06-04 05:02:46 +02:00 |
|
de4dot
|
27a91f5942
|
Change parameters type from [] to IList
|
2012-06-04 03:55:25 +02:00 |
|
de4dot
|
286462db4b
|
Move file
|
2012-06-03 19:08:46 +02:00 |
|
de4dot
|
e75386d0f9
|
Move method to Utils.cs
|
2012-06-03 16:44:08 +02:00 |
|
de4dot
|
b844dbc428
|
Detect ILP
|
2012-06-02 20:56:36 +02:00 |
|
de4dot
|
bff92e02e7
|
Remove unused method
|
2012-06-02 17:32:05 +02:00 |
|
de4dot
|
d2ec4e2969
|
New version: 1.8.5
|
2012-06-02 07:27:50 +02:00 |
|
de4dot
|
ec8139f640
|
Refactor code and support latest AN build
|
2012-06-02 07:26:21 +02:00 |
|
de4dot
|
a25f4f4640
|
Remove proxy methods type and make sure all proxy methods are inlined
|
2012-06-02 03:33:21 +02:00 |
|
de4dot
|
3c99e8d0d6
|
Update valid name regex
|
2012-06-01 12:53:03 +02:00 |
|
de4dot
|
6696c26496
|
Assembly resolver init method is sometimes only called from Main()
|
2012-06-01 12:40:16 +02:00 |
|
de4dot
|
d091564d85
|
Fix ToString(). Should separate generic args with commas
|
2012-06-01 12:05:01 +02:00 |
|
de4dot
|
cd2851baf4
|
Add an option to disable dumping embedded assemblies
|
2012-06-01 12:01:45 +02:00 |
|
de4dot
|
58b62ff914
|
Decrypt main assembly and embedded assemblies
|
2012-06-01 11:53:54 +02:00 |
|
de4dot
|
ddc270b963
|
Remove newlines from names when calling logger methods
|
2012-05-31 06:08:01 +02:00 |
|
de4dot
|
96f9f4154d
|
Decrypt CF encrypted strings
|
2012-05-29 20:20:11 +02:00 |
|
de4dot
|
9b591c68d3
|
Fix CF proxy calls
|
2012-05-29 19:14:41 +02:00 |
|
de4dot
|
512c650e11
|
Add another proxy call fixer class
|
2012-05-29 19:13:43 +02:00 |
|
de4dot
|
24d1c5182b
|
Update comment
|
2012-05-29 19:07:01 +02:00 |
|
de4dot
|
58adda95b6
|
getAllBlocks() now returns a List instead of an IList
|
2012-05-29 19:06:41 +02:00 |
|
de4dot
|
7b3dcf8e05
|
Refactor proxy call fixer classes
|
2012-05-29 11:13:39 +02:00 |
|
de4dot
|
1b569a0d24
|
Support MPRESS
|
2012-05-28 18:00:29 +02:00 |
|
de4dot
|
3e6a259e8f
|
Add 50 more points if methods decrypter is detected
|
2012-05-27 07:43:26 +02:00 |
|
de4dot
|
c441a60372
|
Print CW version number
|
2012-05-27 07:00:13 +02:00 |
|
de4dot
|
eebb090827
|
Support old CW 2.x
|
2012-05-27 02:31:53 +02:00 |
|
de4dot
|
06a30473da
|
Decrypt strings encrypted with older CW version
|
2012-05-26 20:20:11 +02:00 |
|
de4dot
|
adaf41c769
|
Decrypt embedded assemblies
|
2012-05-26 17:41:08 +02:00 |
|
de4dot
|
3a96ae391a
|
Move common resolver handler detector code to DeobUtils
|
2012-05-26 17:33:26 +02:00 |
|
de4dot
|
dbd7affaa8
|
Update valid name regex
|
2012-05-26 14:40:51 +02:00 |
|