ViR Dash
23477ccb5f
Implemented ConfuserEx deobfuscator
...
x86 cflow and x86 constant decryption
Backport of LINQ (LinqBridge)
Shift left/right emulation fixes in de4dot core
Block class extended to hold additional information
2017-02-13 11:14:22 +02:00
PoroCYon
126758fa6f
Fix compiler errors (on mono) ( #123 )
2017-01-05 13:46:04 +01:00
de4dot
4c684bb67e
Update copyright years
2015-10-29 22:45:26 +01:00
de4dot
01179242a7
DotNetFile prop was removed from dnlib, update code
2014-05-23 16:19:25 +02:00
de4dot
282cabed87
Some updates because of new dnlib version
...
- Use a GenericParamContext when resolving tokens
- IDecrypter.GetMethodBody() method signature got updated
- ICustomAttributeType now implements IMethod so we don't need to cast it
- MemberRefFinder now scans all SecurityAttributes and MarshalType for types
2014-05-10 09:00:43 +02:00
de4dot
099233960f
Update string decrypter detector
2014-04-14 18:26:59 +02:00
de4dot
27694eb19c
Support Agile.NET 6.3.0.17
2014-03-27 11:41:18 +01:00
de4dot
43453f3863
Support more than one string decrypter method
2014-03-27 11:28:52 +01:00
de4dot
ff3b87e42e
Use next handler if end is reached
2014-03-24 20:18:37 +01:00
de4dot
39a99d5e01
Update copyright years
2014-03-11 22:15:43 +01:00
de4dot
a9a79021a4
Print number of restored methods
2014-03-11 22:05:54 +01:00
de4dot
e2a95f6838
Support Agile.NET 6.3.0.10
2013-11-23 22:00:13 +01:00
de4dot
52668b9420
Restore bool/char array ldelem/stelem instructions
2013-11-22 20:21:09 +01:00
de4dot
ba29576cfb
Rename get() -> Get()
2013-11-18 16:28:44 +01:00
de4dot
544aa9f145
Most deobfuscators now don't rename everything with east asian chars
2013-11-18 15:43:08 +01:00
de4dot
db0001f481
Count both VM classes as one
2013-11-11 18:26:09 +01:00
de4dot
b65e9a59df
Support latest Agile.NET
2013-11-08 11:05:17 +01:00
de4dot
f9dde3317c
Rename namespace vm -> vm.v1
2013-10-29 18:11:31 +01:00
de4dot
211d1b67f6
Use standard .NET naming convention
2013-01-19 13:03:57 +01:00
de4dot
05e773018e
Update copyright years
2013-01-01 17:03:16 +01:00
de4dot
e15c74ae3e
dnlib submodule was renamed. Update code
2012-12-20 02:06:09 +01:00
de4dot
9d38345e28
Update error message
2012-12-18 22:56:42 +01:00
de4dot
be2271f932
Add updated submodule
2012-12-16 00:03:56 +01:00
de4dot
6ce3b44de6
Preserve tokens if VM code couldn't be restored
2012-12-14 16:51:21 +01:00
de4dot
faf37a4a47
Use a char[] instead of a StringBuilder since length is known
2012-12-03 01:22:14 +01:00
de4dot
a2cdfdb9e3
Add AssemblyServer projects for CLR v2.0/4.0 x86/x64
2012-11-23 07:12:43 +01:00
de4dot
9263a3df3d
Remove all cecil code/comment refs
2012-11-22 09:14:51 +01:00
de4dot
3a519b51d8
This shouldn't be a warning
2012-11-22 05:50:05 +01:00
de4dot
5b43e33a35
Remove old PeImage code and use the new one
2012-11-21 11:14:20 +01:00
de4dot
5c2237b439
Remove useless property
2012-11-20 01:16:02 +01:00
de4dot
4658e911a2
Reset resource data positions
2012-11-20 01:15:27 +01:00
de4dot
d9bc6ea480
Fix operand restorer
2012-11-20 01:14:05 +01:00
de4dot
969d41c089
Default name is CliSecure
2012-11-20 01:13:36 +01:00
de4dot
5ad2e18695
Update code since submodule was updated
2012-11-19 17:58:34 +01:00
de4dot
6a7ddbaa56
Update code; submodule was updated
2012-11-16 23:50:52 +01:00
de4dot
226d18dff7
Only set ILOnly if there are no native methods
2012-11-14 11:33:47 +01:00
de4dot
ac9168599b
Use IPEImage.FindWin32ResourceData()
2012-11-12 04:40:48 +01:00
de4dot
99b38ac22f
Don't Dispose() of the resource data reader
2012-11-11 14:46:00 +01:00
de4dot
b152362088
Update logger
...
- It's not static anymore
- It implements ILogger
- It can ignore errors/warnings but an option to disable it
2012-11-11 05:41:54 +01:00
de4dot
7b0ba43248
UTF8String was moved to DotNet ns. Fix code
2012-11-10 00:45:04 +01:00
de4dot
311a3c9c05
Remove now useless using statements
2012-11-10 00:02:11 +01:00
de4dot
73e15c0919
Change method sig to take a IPEImage instead of a PEImage
2012-11-09 11:34:23 +01:00
de4dot
d47a03f51a
Unpack CS packed files
2012-11-09 11:32:29 +01:00
de4dot
4393df31d9
Update detection of CSVM asm ref
2012-11-08 07:07:02 +01:00
de4dot
e600696182
Use IBinaryReader.ReadRemainingBytes()
2012-11-07 07:29:39 +01:00
de4dot
ab78e97423
Use the new name of this obfuscator
2012-11-07 05:47:33 +01:00
de4dot
583d4201f5
Port Agile.NET deobfuscator
2012-11-07 05:17:45 +01:00
de4dot
4be7e4fe46
Initialize DumpedMethod.mdRVA
2012-11-07 00:26:36 +01:00
de4dot
19ed1ac219
Rename CliSecure -> Agile_NET
2012-11-06 16:38:39 +01:00
