de4dot
|
e4fe749559
|
Use hasInteger() method
|
2012-03-15 02:19:35 +01:00 |
|
de4dot
|
27f382a017
|
Support a (new?) version of CryptoObfuscator. Fixes #33
|
2012-03-14 22:28:20 +01:00 |
|
de4dot
|
a405edf0fd
|
Support latest DeepSea version (4.0.4.32)
|
2012-03-13 20:37:33 +01:00 |
|
de4dot
|
ada90b1294
|
Add another CO detection check
|
2012-03-13 20:27:41 +01:00 |
|
de4dot
|
e949d8c926
|
Add support for latest EF 3.3.136
|
2012-03-13 09:26:40 +01:00 |
|
de4dot
|
8c5c055066
|
New version: 1.7.2
|
2012-03-11 15:59:36 +01:00 |
|
de4dot
|
7e1bf542af
|
Support a new EF 3.3 version that was released 1-2 days ago
|
2012-03-11 15:59:25 +01:00 |
|
de4dot
|
f5ee6e3e5e
|
Move dll files to a bin sub dir
|
2012-03-10 20:47:42 +01:00 |
|
de4dot
|
7d4c791575
|
Update detection of SA v2 string decrypter
|
2012-03-10 05:32:50 +01:00 |
|
de4dot
|
fafa60c4c9
|
Update expressions
|
2012-03-10 05:31:07 +01:00 |
|
de4dot
|
8b220697e0
|
New version: 1.7.1
|
2012-03-08 19:51:02 +01:00 |
|
de4dot
|
4e997910e4
|
Update detection of string decrypter type
|
2012-03-08 19:21:54 +01:00 |
|
de4dot
|
a41ea0969f
|
Call initAllTypes() before resolveAllRefs() to make sure baseType is initialized
|
2012-03-08 19:03:43 +01:00 |
|
de4dot
|
51fe58c4cd
|
Merge branch 'new_code'
|
2012-03-08 18:03:25 +01:00 |
|
de4dot
|
38fb775a7e
|
Use hasReturnValue() method
|
2012-03-08 18:03:12 +01:00 |
|
de4dot
|
3cde99b2e7
|
Remove overrides field
|
2012-03-08 17:57:35 +01:00 |
|
de4dot
|
4a7b4f4111
|
Update name regex
|
2012-03-08 16:15:19 +01:00 |
|
de4dot
|
674201e98c
|
Rename
|
2012-03-08 13:23:01 +01:00 |
|
de4dot
|
072bb4b5ce
|
Update code since cecil removed global asm resolver
|
2012-03-08 11:09:51 +01:00 |
|
de4dot
|
b4525ed58d
|
Support EF 3.3
|
2012-03-06 10:43:06 +01:00 |
|
de4dot
|
5c943d759d
|
Check base types for property/field
|
2012-03-03 18:23:53 +01:00 |
|
de4dot
|
77f1f2de67
|
Rename custom attribute fields and properties
|
2012-03-03 06:13:35 +01:00 |
|
de4dot
|
c3c92ebfaa
|
New version: 1.7.0
|
2012-03-01 22:14:23 +01:00 |
|
de4dot
|
48d6a3b6fc
|
Merge branch 'mc'
|
2012-03-01 22:10:36 +01:00 |
|
de4dot
|
86987518d6
|
Method should not be public
|
2012-02-29 11:41:07 +01:00 |
|
de4dot
|
9bf30e165c
|
Rename classes
|
2012-02-29 11:41:06 +01:00 |
|
de4dot
|
9791e63e51
|
Engrish
|
2012-02-29 11:41:05 +01:00 |
|
de4dot
|
8740ba8419
|
Rename variable
|
2012-02-29 11:41:04 +01:00 |
|
de4dot
|
167368f488
|
Attributes are worth less
|
2012-02-29 00:13:57 +01:00 |
|
de4dot
|
b27635f493
|
Remove sealed flag from interfaces
|
2012-02-28 23:57:48 +01:00 |
|
de4dot
|
ec30ec7b07
|
Add CF 2.0/3.5, SL 2.0 ref asm search paths
|
2012-02-28 22:36:35 +01:00 |
|
de4dot
|
e6d0c4a043
|
Move version detection to a new class
|
2012-02-28 22:30:22 +01:00 |
|
de4dot
|
77228ecfca
|
Update name regex
|
2012-02-28 22:24:08 +01:00 |
|
de4dot
|
68b4315e95
|
Update detection of the type and remove another type
|
2012-02-28 20:49:03 +01:00 |
|
de4dot
|
269b695245
|
Update detection of that type
|
2012-02-28 20:44:05 +01:00 |
|
de4dot
|
c970e1f6ca
|
Support v3.0 - 3.1
|
2012-02-28 19:42:19 +01:00 |
|
de4dot
|
acb53f535b
|
Throw if init fails
|
2012-02-28 18:18:13 +01:00 |
|
de4dot
|
f37e5a12d0
|
Restore calls to Assembly::GetManifestResourceXXX methods
|
2012-02-28 18:17:33 +01:00 |
|
de4dot
|
d740a3f5f6
|
Move GetManifestResourceStream code to a new class
|
2012-02-28 18:14:41 +01:00 |
|
de4dot
|
e72fb7220a
|
Decrypt embedded assemblies and resources
|
2012-02-27 23:43:45 +01:00 |
|
de4dot
|
9bab65640c
|
Refactor
|
2012-02-27 12:55:37 +01:00 |
|
de4dot
|
3c480f4c6c
|
Add another warning message
|
2012-02-27 01:51:44 +01:00 |
|
de4dot
|
cee04d3bba
|
master was updated
|
2012-02-26 22:57:55 +01:00 |
|
de4dot
|
cf76c14b4b
|
Merge branch 'master' into mc
|
2012-02-26 22:55:06 +01:00 |
|
de4dot
|
efec6625ef
|
Update detection of EF 3.0 and 3.1
|
2012-02-26 22:54:28 +01:00 |
|
de4dot
|
2bff1242c1
|
Add static EF string decrypter
|
2012-02-26 22:48:43 +01:00 |
|
de4dot
|
da1d649ef4
|
Make sure no generic methods are inlined
|
2012-02-25 06:33:38 +01:00 |
|
de4dot
|
10ceb12e30
|
Change return type to IEnumerable<int>
|
2012-02-25 06:25:40 +01:00 |
|
de4dot
|
48758be8f0
|
Use a new class instead of the dict
|
2012-02-25 06:14:19 +01:00 |
|
de4dot
|
d09938ca47
|
Remove classes with null base type
|
2012-02-25 05:28:32 +01:00 |
|
de4dot
|
330be994a1
|
Restore indentation
|
2012-02-25 05:22:30 +01:00 |
|
de4dot
|
5288b4b3d2
|
Make sure enum instance field has proper flags set (make peverify happy)
|
2012-02-25 05:15:42 +01:00 |
|
de4dot
|
b000112abc
|
Merge branch 'master' into mc
|
2012-02-23 17:16:00 +01:00 |
|
de4dot
|
fb832ca3de
|
New version: 1.6.1
|
2012-02-23 16:25:47 +01:00 |
|
de4dot
|
4ec4bb1d65
|
MC actually does rename symbols so add an updated regex
|
2012-02-23 11:52:19 +01:00 |
|
de4dot
|
6e8b32df21
|
Reverse sort comments
|
2012-02-23 10:59:02 +01:00 |
|
de4dot
|
7c4f014da3
|
Support old MC 3.2
|
2012-02-22 12:38:02 +01:00 |
|
de4dot
|
59ee55105d
|
Support some older MC version
|
2012-02-22 12:14:15 +01:00 |
|
de4dot
|
435d3303c3
|
Merge branch 'master' into mc
|
2012-02-21 17:33:45 +01:00 |
|
de4dot
|
538e4f738d
|
Fix issue #24. Don't remove decrypter type if there was an error
|
2012-02-21 17:14:02 +01:00 |
|
de4dot
|
e5145fcca9
|
Remove MC type and module refs
|
2012-02-21 12:01:39 +01:00 |
|
de4dot
|
7bc3930df9
|
Decrypt resources
|
2012-02-21 11:51:19 +01:00 |
|
de4dot
|
58a94a8420
|
Decrypt methods protected with older MC version
|
2012-02-21 09:26:05 +01:00 |
|
de4dot
|
eb223537f0
|
Decrypt methods (decryption #1-4, not #5-7)
|
2012-02-20 17:20:29 +01:00 |
|
de4dot
|
b422e08fb1
|
Add lookup() method for ModuleReferences
|
2012-02-20 17:18:22 +01:00 |
|
de4dot
|
0c3aca32b9
|
Update code to handle MethodDefPtr table
|
2012-02-20 17:17:55 +01:00 |
|
de4dot
|
6d2435377f
|
Merge branch 'master' into mc
|
2012-02-20 05:59:08 +01:00 |
|
de4dot
|
b093e4c918
|
Copy license text files to output directory
|
2012-02-20 05:58:58 +01:00 |
|
de4dot
|
8536e211dd
|
Detect MC
|
2012-02-20 04:58:46 +01:00 |
|
de4dot
|
fc497b1688
|
Add MaxtoCode files
|
2012-02-20 03:48:59 +01:00 |
|
de4dot
|
d7afc66c6d
|
Don't remove string decrypter type if there's still code calling it
|
2012-02-19 00:50:08 +01:00 |
|
de4dot
|
e18ff9aea1
|
Don't remove string decrypter types if there was an error decrypting strings
|
2012-02-18 08:08:00 +01:00 |
|
de4dot
|
2c969446b0
|
Add InlinedAllCalls property
|
2012-02-18 07:56:53 +01:00 |
|
de4dot
|
8b059bcea7
|
These messages should be warnings
|
2012-02-18 07:52:58 +01:00 |
|
de4dot
|
9e16d9cd40
|
Rename method
|
2012-02-13 11:28:08 +01:00 |
|
de4dot
|
5579323b3e
|
Print warning if I/O exception
|
2012-02-13 11:16:38 +01:00 |
|
de4dot
|
981472cd91
|
Methods should be static and have a body
|
2012-02-13 11:11:08 +01:00 |
|
de4dot
|
a35c765f15
|
Rename method
|
2012-02-13 10:20:11 +01:00 |
|
de4dot
|
f7abb70475
|
New version: 1.6.0
|
2012-02-12 18:07:53 +01:00 |
|
de4dot
|
179ea6d6fd
|
Only string decrypter method is worth 100 points
|
2012-02-12 16:56:26 +01:00 |
|
de4dot
|
3e3be639e5
|
Move reading variable length int32 code to DeobUtils
|
2012-02-12 16:54:48 +01:00 |
|
de4dot
|
67efd5e7e7
|
Rename namespace to Eazfuscator_NET
|
2012-02-12 16:46:39 +01:00 |
|
de4dot
|
c2d13d9059
|
Remove all invalid methods
|
2012-02-12 16:29:29 +01:00 |
|
de4dot
|
4691c805d8
|
Ignore invalid methods
|
2012-02-12 16:25:12 +01:00 |
|
de4dot
|
46f23ce89d
|
Add InvalidMethodsFinder
|
2012-02-12 16:24:59 +01:00 |
|
de4dot
|
c15773b709
|
Merge branch 'cv' into next_version
Conflicts:
blocks/DotNetUtils.cs
|
2012-02-12 14:47:24 +01:00 |
|
de4dot
|
c73fcfc1d0
|
Remove CV type if it is empty
|
2012-02-12 14:38:42 +01:00 |
|
de4dot
|
5ce1f74263
|
Position has already been set to 0
|
2012-02-12 14:29:11 +01:00 |
|
de4dot
|
037cb5bc68
|
Decrypt the remaining (EREX) resources
|
2012-02-12 14:28:53 +01:00 |
|
de4dot
|
9a6bd53cb9
|
Remove obfuscator obfuscator bundle types
|
2012-02-12 13:38:23 +01:00 |
|
de4dot
|
ded45dcb7a
|
Remove proxy method types and main type
|
2012-02-12 13:00:38 +01:00 |
|
de4dot
|
ff55be46b6
|
Rename getField() to getFieldByName() and add a real getField() method
|
2012-02-12 12:53:36 +01:00 |
|
de4dot
|
8999eb8e0f
|
Remove CV main type methods if < v5.0
|
2012-02-12 12:08:46 +01:00 |
|
de4dot
|
42f66c3948
|
Fix detection; 3.2 doesn't have those extra fields
|
2012-02-12 12:03:55 +01:00 |
|
de4dot
|
d6327b401e
|
Remove all anti-reflection types
|
2012-02-12 11:39:00 +01:00 |
|
de4dot
|
80d338637e
|
Add method to remove classes with no base type
|
2012-02-12 11:35:18 +01:00 |
|
de4dot
|
18cd71ecdc
|
Update detection (v5.0)
|
2012-02-11 23:39:37 +01:00 |
|
de4dot
|
070acc59f1
|
Bail out earlier if not encrypted
|
2012-02-11 23:23:51 +01:00 |
|
de4dot
|
91f7d2cb51
|
Find and remove resource decrypter types
|
2012-02-11 23:23:25 +01:00 |
|
de4dot
|
c18bed7d69
|
Add namespace
|
2012-02-11 23:11:54 +01:00 |
|
de4dot
|
bffbe419d5
|
Add hasInteger() method
|
2012-02-11 23:11:41 +01:00 |
|
de4dot
|
d44db9871e
|
Add log message that we have decrypted a resource
|
2012-02-11 21:51:48 +01:00 |
|
de4dot
|
57b947a3da
|
Add InvalidDataException
|
2012-02-11 21:49:22 +01:00 |
|
de4dot
|
8b2ef5d6bb
|
Update if expression
|
2012-02-11 21:43:26 +01:00 |
|
de4dot
|
cd7d3724c3
|
Move fields from binder to exception
|
2012-02-11 21:30:54 +01:00 |
|
de4dot
|
9050af8a03
|
Refactor method
|
2012-02-11 19:34:07 +01:00 |
|
de4dot
|
ccd7d2ac79
|
Decrypt .resources files
|
2012-02-11 16:46:39 +01:00 |
|
de4dot
|
e5a72396c2
|
Remove length parameter from xxxteaDecrypt()
|
2012-02-11 16:46:02 +01:00 |
|
de4dot
|
76d9e87c3c
|
Add code to write .resources files
|
2012-02-11 16:43:53 +01:00 |
|
de4dot
|
ae97752d9c
|
Set data field to a 1-byte array
|
2012-02-09 10:14:59 +01:00 |
|
de4dot
|
ba399609c7
|
Initialize otherInitMethods in 2nd ctor
|
2012-02-09 10:14:29 +01:00 |
|
de4dot
|
45bf016a2e
|
Rename method
|
2012-02-09 10:14:08 +01:00 |
|
de4dot
|
15713a2b38
|
Check assembly for null (it could be a netmodule)
|
2012-02-08 22:01:10 +01:00 |
|
de4dot
|
d5089fa888
|
Remove kill type in deobfuscateBegin()
|
2012-02-08 19:54:05 +01:00 |
|
de4dot
|
b5c8a89b32
|
Remove init method calls called from .ctors
|
2012-02-08 19:40:17 +01:00 |
|
de4dot
|
a8d6aac306
|
Update detection of tamper detection types when proxy calls are enabled
|
2012-02-08 19:36:58 +01:00 |
|
de4dot
|
04247b5533
|
Remove most calls to main CV type
|
2012-02-08 19:21:00 +01:00 |
|
de4dot
|
c757139357
|
Remove string decrypter type
|
2012-02-08 18:58:06 +01:00 |
|
de4dot
|
98c8ea49e9
|
Remove tamper detection code
|
2012-02-08 18:40:24 +01:00 |
|
de4dot
|
1583552825
|
Make sure rvas list is never null
|
2012-02-08 16:14:07 +01:00 |
|
de4dot
|
780da4a0ad
|
Update detection of encrypted methods data
|
2012-02-08 15:52:39 +01:00 |
|
de4dot
|
fa6b0d4054
|
Move detection of CV main type to its own class
|
2012-02-08 15:40:11 +01:00 |
|
de4dot
|
bb89ce2983
|
Remove method since base class now has the same method
|
2012-02-08 15:19:45 +01:00 |
|
de4dot
|
1e3daf3b45
|
Dump embedded assemblies
|
2012-02-08 12:33:02 +01:00 |
|
de4dot
|
09e840923d
|
Search for sig starting from _stub RVA
|
2012-02-08 09:29:49 +01:00 |
|
de4dot
|
a8d4b38c79
|
Mover version info to a new ObfuscatorVersion enum
|
2012-02-08 08:55:45 +01:00 |
|
de4dot
|
0e89c0fc35
|
Only check Version property if methods decrypter was found
|
2012-02-08 08:50:36 +01:00 |
|
de4dot
|
776fd7f69f
|
Speed up finding V5 methods decrypter type
|
2012-02-07 15:17:41 +01:00 |
|
de4dot
|
1076218a81
|
Detect CV version
|
2012-02-07 15:05:27 +01:00 |
|
de4dot
|
6ab0748bdd
|
Decrypt V5 encrypted methods
|
2012-02-07 14:55:20 +01:00 |
|
de4dot
|
f11c51830f
|
Make sure info is copied
|
2012-02-07 14:53:58 +01:00 |
|
de4dot
|
97d09c4c65
|
Make method accessible by sub classes
|
2012-02-07 14:53:34 +01:00 |
|
de4dot
|
3276f433c9
|
Add code to detect V5 methods decrypter
|
2012-02-07 05:08:02 +01:00 |
|
de4dot
|
0aeee176cc
|
Merge v3-v4 and v5 code
|
2012-02-07 04:45:59 +01:00 |
|
de4dot
|
f1a1188409
|
Add a new ctor to copy values from old instance
|
2012-02-07 04:45:04 +01:00 |
|
de4dot
|
8f9cc6d290
|
Re-use v3-v4 string decrypter
|
2012-02-07 03:03:49 +01:00 |
|
de4dot
|
d512889833
|
Fix 'shadow calls' obfuscation
|
2012-02-07 02:07:31 +01:00 |
|
de4dot
|
c2313110b8
|
Add getDelegateTypes() and fix findProxyCall()
|
2012-02-07 02:02:49 +01:00 |
|
de4dot
|
ad8a5078fe
|
Rename method
|
2012-02-07 00:42:32 +01:00 |
|
de4dot
|
2ccb35afb0
|
Add CV5 files
|
2012-02-06 15:55:35 +01:00 |
|
de4dot
|
26bf21a84e
|
Show obfuscator version
|
2012-02-06 15:55:14 +01:00 |
|
de4dot
|
b39725f12f
|
Remove useless 'using'
|
2012-02-06 15:52:19 +01:00 |
|
de4dot
|
0d6542e383
|
Move v3-v4 code to a sub dir
|
2012-02-06 15:49:27 +01:00 |
|
de4dot
|
da3a28f0a8
|
Move (and rename) XXTEA decrypt func to DeobUtils
|
2012-02-06 08:22:55 +01:00 |
|
de4dot
|
b867301797
|
Update valid name regex
|
2012-02-06 08:20:04 +01:00 |
|
de4dot
|
b3750f9d4c
|
Initialize its token field
|
2012-02-05 23:04:24 +01:00 |
|
de4dot
|
542c6bb213
|
Support 3.2 methods decrypter
|
2012-02-05 22:49:10 +01:00 |
|
de4dot
|
d5c3a6964b
|
Support 4.0 methods decrypter
|
2012-02-05 21:27:36 +01:00 |
|
de4dot
|
1903cf8607
|
KILL type is only worth 10 points
|
2012-02-05 19:01:49 +01:00 |
|
de4dot
|
9e4b29034f
|
Finish getStringDecrypterMethods() method
|
2012-02-05 18:59:29 +01:00 |
|