monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,020 Commits 2 Branches 1 Tag 5 MiB
v4.0.0
Commit Graph

1550 Commits

Author SHA1 Message Date
de4dot
b7eb39203a Add Stream resource type 2013-11-17 20:24:55 +01:00
de4dot
8521f7baac ResourceReader.Read() now takes a ModuleDef instead of a ModuleDefMD as 1st param 2013-11-17 20:23:32 +01:00
de4dot
8b4b48cb08 Add ToString() overrides 2013-11-17 20:21:44 +01:00
de4dot
e8879cd51f Print old -> new tokens if -v option is used 2013-11-17 18:12:21 +01:00
de4dot
aa01d4eebb Add 1.0.7.0 sig 2013-11-17 02:04:11 +01:00
de4dot
120289d12b Write a warning message if runtime files are missing 2013-11-16 20:04:38 +01:00
de4dot
50eb86acfd Detect ILProtector version 2013-11-16 20:04:23 +01:00
de4dot
2c1edfe900 Sort files in .csproj file 2013-11-15 21:32:27 +01:00
de4dot
754b67aa00 Merge branch 'master' into confuser 2013-11-15 21:29:17 +01:00
de4dot
b99517373d Sort files in .csproj file 2013-11-15 21:28:06 +01:00
de4dot
33a00e644c Merge branch 'master' into confuser 2013-11-15 21:18:11 +01:00
de4dot
f2a9118bf5 Fix merges 2013-11-15 19:30:11 +01:00
de4dot
cec4519635 Merge branch 'df' into merged 
Conflicts:
	de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs
 2013-11-15 19:28:32 +01:00
de4dot
c768f5d68f Merge branch 'an' into merged 2013-11-15 19:27:56 +01:00
de4dot
dac63e8ec5 Merge branch 'il' into merged 
Conflicts:
	de4dot.code/de4dot.code.csproj
 2013-11-15 19:27:45 +01:00
de4dot
ee370d6ffe Merge branches 'ef', 'mc' and 'dr' into merged 
Conflicts:
	de4dot.code/de4dot.code.csproj
 2013-11-15 19:26:02 +01:00
de4dot
48f31acb7e Detect some other DNR 4.5 version 2013-11-15 14:44:20 +01:00
de4dot
5d6db10ba4 Don't decrypt already decrypted resources 2013-11-14 22:48:44 +01:00
de4dot
239bfbfc2b Add known timestamps 2013-11-14 13:38:57 +01:00
de4dot
b88ecc8a63 Update name regex 2013-11-14 10:48:07 +01:00
de4dot
db0001f481 Count both VM classes as one 2013-11-11 18:26:09 +01:00
de4dot
b65e9a59df Support latest Agile.NET 2013-11-08 11:05:17 +01:00
de4dot
d4ff713b95 Update DNR name regex 2013-11-07 03:25:52 +01:00
de4dot
d410d80815 Update CO resource class detector code 2013-11-06 08:12:40 +01:00
de4dot
85c565fc20 Support more MaxtoCode runtimes 2013-11-06 03:20:44 +01:00
de4dot
eb284bf4bf Support .NET Reactor 4.7 2013-11-05 13:52:58 +01:00
de4dot
f9dde3317c Rename namespace vm -> vm.v1 2013-10-29 18:11:31 +01:00
de4dot
511a061f64 Support latest Eazfuscator.NET 2013-10-27 19:40:51 +01:00
de4dot
2cc12006aa Support ILProtector 1.0.7.1 - 2.0.11.0 2013-10-26 17:25:58 +02:00
de4dot
c956e0fc2e Allow "non-safe" code 2013-10-25 21:46:24 +02:00
de4dot
45c8d3ed89 Add HandleProcessCorruptedStateExceptionsAttribute 2013-10-25 21:46:05 +02:00
de4dot
9ede6f669e Add a generic service 2013-10-25 21:45:34 +02:00
de4dot
730505fd4f Write a message if decryption probably failed 2013-10-21 07:29:20 +02:00
de4dot
8808c049f1 Clear old data if we re-try decryption 2013-10-21 07:19:39 +02:00
de4dot
7c6005cde5 Support more MaxtoCode runtimes 2013-10-20 18:09:38 +02:00
de4dot
6f925abab7 Make FindSection() public 2013-10-20 10:25:51 +02:00
de4dot
156bc4c7ee Rename public value -> Value, validMask -> ValidMask 2013-10-16 10:13:09 +02:00
de4dot
1dee5e8017 Support latest Dotfuscator 2013-10-15 10:12:53 +02:00
de4dot
ad5fb70673 Support latest Rummage 2013-10-13 10:23:31 +02:00
de4dot
689635cf69 Support .NET Reactor 4.5 (an updated version) and 4.6 2013-10-13 08:49:34 +02:00
de4dot
43e441ca93 Rename blocks -> de4dot.blocks 2013-10-02 20:49:21 +02:00
de4dot
662c78380a Refactor IAssemblyService 2013-10-02 18:07:28 +02:00
de4dot
f01d0f2073 Fix if condition 2013-09-28 21:28:59 +02:00
de4dot
e70e226916 Clear deobfuscated state for each restored method 2013-09-28 19:51:25 +02:00
de4dot
01dbcd0632 Add ISimpleDeobfuscator::MethodModified() to reset deobfuscated state 2013-09-28 19:43:46 +02:00
de4dot
24b22268e3 Deobfuscate asm resolver method 2013-09-28 19:43:05 +02:00
de4dot
f9ed45c670 Restore ldnull instructions 2013-09-28 19:07:03 +02:00
de4dot
67c9e76276 Inline methods 2013-09-28 14:55:29 +02:00
de4dot
192fd3b66c Merge branch 'master' into co 2013-09-27 19:58:04 +02:00
de4dot
a2ee0eb08f Merge branch 'master' into confuser 2013-09-27 04:49:41 +02:00
de4dot
158fb63bba If asm is not SN signed, only use its name, not version, PKT etc 2013-09-26 19:29:02 +02:00
de4dot
d0bee28111 Disable TypeDef cache when removing types etc 2013-09-26 16:36:52 +02:00
de4dot
50ff551898 Use new ModuleDef method to clear TypeDef cache 2013-09-26 16:32:45 +02:00
de4dot
9acec7a033 Make sure decl type exists 2013-09-25 02:17:24 +02:00
de4dot
3d05b408c9 Decrypt arrays 2013-09-25 01:37:53 +02:00
de4dot
b7255bc3b5 Add assembly string separator detection code 2013-09-24 21:44:21 +02:00
de4dot
edcea5f047 Add more Confuser revisions 2013-09-22 18:38:00 +02:00
de4dot
e68b71e8e4 Support Confuser 1.9 r79630 2013-09-22 18:35:58 +02:00
de4dot
9ddad4bb5a Support Confuser 1.9 r78964 2013-09-22 17:04:45 +02:00
de4dot
3447efba31 Support Confuser 1.9 r78963 2013-09-22 16:07:15 +02:00
de4dot
df2c8dc27f Add latest dnlib version and update stuff that got renamed 2013-09-22 14:45:26 +02:00
de4dot
ab4daa56cb Merge branch 'master' into confuser 2013-09-22 14:07:05 +02:00
de4dot
aabe7f0ad4 dnlib renamed a method 2013-09-20 20:26:17 +02:00
de4dot
b80a1a0b7c Rename variables 2013-04-30 12:15:07 +02:00
de4dot
37af3b3d11 Fix method name 2013-04-30 12:00:03 +02:00
de4dot
2cef02aefb Support Confuser 1.9 r78363 2013-02-02 17:03:56 +01:00
de4dot
f02289037c Merge ../de4dot into confuser 2013-01-24 21:15:09 +01:00
de4dot
35c1820afa Support latest MaxtoCode and two older versions 2013-01-24 18:33:14 +01:00
de4dot
c5fe3e99a4 Refactor 
- Add Decompress()
- Add DecryptXor()
- Remove Decrypt_v19_r77172()
 2013-01-20 18:41:58 +01:00
de4dot
afe66e770d Update "reason" string 2013-01-20 18:12:53 +01:00
de4dot
641a0ce8a4 Add more revisions 2013-01-20 18:09:42 +01:00
de4dot
47ce8507db Support Confuser 1.9 r78056 2013-01-20 18:02:19 +01:00
de4dot
3eb7e5be41 Support Confuser 1.9 r77172 2013-01-20 15:59:30 +01:00
de4dot
40083ad33a Use standard .NET naming convention 2013-01-19 13:09:49 +01:00
de4dot
08ca871406 Merge branch 'master' into confuser 2013-01-19 13:04:24 +01:00
de4dot
211d1b67f6 Use standard .NET naming convention 2013-01-19 13:03:57 +01:00
de4dot
9ac79e253e Support the latest CryptoObfuscator build 2013-01-15 01:37:21 +01:00
de4dot
8225f79f3c Use a stable sort 2013-01-13 20:57:15 +01:00
de4dot
ecd53ddfc1 New version: 2.0.3 2013-01-12 17:17:15 +01:00
de4dot
a41795e4d9 Update copyright years 2013-01-12 17:15:14 +01:00
de4dot
0d1440fc92 Merge branch 'master' into confuser 2013-01-12 17:13:33 +01:00
de4dot
88571cbf8b Update CryptoObfuscator deobfuscator 2013-01-10 02:47:53 +01:00
de4dot
05e773018e Update copyright years 2013-01-01 17:03:16 +01:00
de4dot
488f592df3 Update Xenocode deobfuscator 
- Remove a type with thousands of methods
- Fix rename regex
- Fix names of attributes (lowercase c)
- Remove an invalid attribute added to the module
 2012-12-30 12:34:21 +01:00
de4dot
cb929f63dd Don't add a base type if the type is actually System.Object 2012-12-28 12:07:11 +01:00
de4dot
23b79fb067 dot10 was renamed dnlib 2012-12-22 21:08:29 +01:00
de4dot
45d4367e3a Merge branch 'master' into confuser 2012-12-22 21:06:42 +01:00
de4dot
740e206e6d New version: 2.0.2 2012-12-21 17:15:19 +01:00
de4dot
d91f82f0c1 New version: 2.0.1 2012-12-20 19:16:14 +01:00
de4dot
6eeeffe56d New version: 2.0.0 2012-12-20 02:40:09 +01:00
de4dot
e15c74ae3e dnlib submodule was renamed. Update code 2012-12-20 02:06:09 +01:00
de4dot
ba54b607eb Make sure MD header version isn't 1.1 (reset it to 2.0 if so) 2012-12-20 01:45:50 +01:00
de4dot
a7fdbd4206 Support latest MaxtoCode version 2012-12-20 01:34:16 +01:00
de4dot
35849b0f9b Submodule was updated. Fix code 2012-12-19 18:14:47 +01:00
de4dot
9d38345e28 Update error message 2012-12-18 22:56:42 +01:00
de4dot
29725a8262 Detect EF 3.6 2012-12-18 22:55:35 +01:00
de4dot
be2271f932 Add updated submodule 2012-12-16 00:03:56 +01:00
de4dot
d0002f098c Copy license files to a new dir 2012-12-14 19:53:48 +01:00
de4dot
6ce3b44de6 Preserve tokens if VM code couldn't be restored 2012-12-14 16:51:21 +01:00
de4dot
e8a9c0675a Add preserveTokensAndTypes() 2012-12-14 16:50:06 +01:00
de4dot
63f1ec4f93 Update DS string decrypter 2012-12-14 12:40:44 +01:00
de4dot
88d1a8ab89 Inline generic methods that DS added 2012-12-14 12:39:06 +01:00
de4dot
bbb715c93c Update string decrypter 2012-12-14 09:22:36 +01:00
de4dot
bbbdf0b0ff Update array cflow deobfuscator 2012-12-14 09:18:14 +01:00
de4dot
7bcf5b4710 Make sure lastOffset <= fileData.Length (could be a bad dump) 2012-12-13 16:19:34 +01:00
de4dot
bf7c0d58d2 Some fixes 
- Rename offset variables
- Alloc buffer outside the loop
- Read CRC32 checksum outside the loop
- Get rid of a local variable
 2012-12-13 14:03:31 +01:00
de4dot
7e9e691ef3 Support ILProtector 1.0.6.0 - 1.0.6.7 2012-12-13 12:03:25 +01:00
de4dot
1dd572f2ef Add DeobUtils.sha1Sum() 2012-12-13 12:02:52 +01:00
de4dot
cf6af49ae7 Add a CRC32 class 2012-12-13 12:02:41 +01:00
de4dot
3e7d403334 Remove the dynocode declaring types 2012-12-11 12:36:59 +01:00
de4dot
b9d91043fc Support the latest CryptoObfuscator version 2012-12-11 12:02:40 +01:00
de4dot
245d875d5f Support Eazfuscator.NET 3.5 string encrypter 2012-12-11 00:23:16 +01:00
de4dot
d5681d9db4 Emulate instructions instead of finding constants 2012-12-10 21:43:56 +01:00
de4dot
ac7694b237 Add Int64Method property 2012-12-10 21:42:49 +01:00
de4dot
61eff40082 Add props to access the locals / values 2012-12-10 21:42:37 +01:00
de4dot
721cd1578a Update EF version detector 2012-12-10 21:42:14 +01:00
de4dot
dcbcaa098e Work around a bug in EF 2012-12-08 01:12:20 +01:00
de4dot
f5967715f2 Only remove the type if we rename types 2012-12-07 15:07:30 +01:00
de4dot
8e79777cdf Return immediately if there's nothing to do 2012-12-07 15:06:52 +01:00
de4dot
fa4e1fcc6b Add RenamerFlags 2012-12-07 15:06:38 +01:00
de4dot
0ba3a0c1e2 Better support of DNR + .NET 1.x assemblies 2012-12-04 23:58:34 +01:00
de4dot
8e69452edb Support .NET Reactor 4.5 2012-12-04 02:29:41 +01:00
de4dot
faf37a4a47 Use a char[] instead of a StringBuilder since length is known 2012-12-03 01:22:14 +01:00
de4dot
9a4cd237e5 Fix detection of SN string decrypter 2012-12-02 23:24:00 +01:00
de4dot
ca6812bca7 Support latest Rummage 2012-12-02 16:20:25 +01:00
de4dot
8a36c8eea6 Add an option to not rename delegate fields 2012-12-01 04:35:39 +01:00
de4dot
643e155cf8 Add options to preserve rids, heaps 2012-12-01 03:24:12 +01:00
de4dot
dcdbe25a0f Add option to disable creating new ParamDefs when renaming 2012-12-01 02:22:59 +01:00
de4dot
99c7cf8eb5 Load target asm's CLR version when decrypting strings dynamically 2012-12-01 01:40:23 +01:00
de4dot
0bb947aebc Fix Confuser code since main code got updated 2012-11-30 21:05:54 +01:00
de4dot
c3608908c5 Merge branch 'port' into confuser 2012-11-30 21:04:22 +01:00
de4dot
3e62b328d1 Add FileHeader and OptionalHeader props 2012-11-30 21:04:05 +01:00
de4dot
87b20b00f2 Set new locals by calling SetLocals(), not by writing to the field 2012-11-30 03:24:15 +01:00
de4dot
a2cdfdb9e3 Add AssemblyServer projects for CLR v2.0/4.0 x86/x64 2012-11-23 07:12:43 +01:00
de4dot
9263a3df3d Remove all cecil code/comment refs 2012-11-22 09:14:51 +01:00
de4dot
fd129aa3c0 Remove non-referenced method 2012-11-22 05:50:15 +01:00
de4dot
3a519b51d8 This shouldn't be a warning 2012-11-22 05:50:05 +01:00
de4dot
7ce782215e Print 4.x when DNR 4 version is unknown 2012-11-21 14:20:38 +01:00
de4dot
8858205344 IDeobfuscator now implements IDisposable 2012-11-21 13:57:13 +01:00
de4dot
5b43e33a35 Remove old PeImage code and use the new one 2012-11-21 11:14:20 +01:00
de4dot
ced43ca70b Use File.WriteAllBytes() 2012-11-21 11:07:40 +01:00
de4dot
bcb9a2958c Dispose() of the PEImage 2012-11-21 11:07:25 +01:00
de4dot
034910ff57 Remove detection of Confuser in Unknown 2012-11-20 08:59:22 +01:00
de4dot
362d825042 Update code since submodule was updated 2012-11-20 08:02:10 +01:00
de4dot
a09bf43cde Merge branch 'port' into confuser 
Conflicts:
	blocks/DotNetUtils.cs
 2012-11-20 08:00:20 +01:00
de4dot
9577bd2118 Reset resource data position 2012-11-20 07:53:54 +01:00
de4dot
bde935c6d8 Remove invalid resources 2012-11-20 07:25:10 +01:00
de4dot
e8155e7eb0 Update detection of invalid CV methods 2012-11-20 06:45:23 +01:00
de4dot
989e364481 Fix detection of DS string decrypter 2012-11-20 05:35:05 +01:00
de4dot
87a83a2757 Exit if string decrypter wasn't detected 2012-11-20 04:42:19 +01:00